You cannot stop a DDOS, you can only mitigate one with more capacity. That’s why there are only a few big players who can do it.

Canonical itself was unable to stop a DDOS attack and they’re distributed. You won’t stop a DDOS if that DDOS is meant for you.