Do you really need that DDoS protection? I have been having my own webserver for decades now hosting public sites and I have only once been in the position that my server was not reachable because of a DDoS attack. And even then the attack was not targeted at my server but at my hosting provider at that time. Everything else was handled by fail2ban easily…