Hi, my app recently got DDoS-ed from bad actors. What’s the best way to implement DDoS protection for an app running on Fly? Let’s say I don’t want to rely on something like Cloudflare, since it’s a multitenant app and my users don’t always use CF or any kind of protection in their custom domains (of which they can add in my app). I’m looking for a solution that can protect at the http or network level, so the attack doesn’t even hit my app.
What about adding a nginx layer (its own app) and then route the traffic to the real app? Do you think it’s a viable option?