I'm not convinced any cloud-based DDoS protection is effective against sophisticated attacks, since the server's actual IP address still faces the public internet and can often be discovered.

Ideally the infrastructure providers would make this standard (they could protect their whole operation and all customers with a single robust solution). It seems wrong to me that this is only occasionally offered, and as a premium service.

But since that's not likely to change anytime soon, what can Cloudways offer on the server-level? There must be options for this.

I like KeyCDN vs MaxCDN because KeyCDN has HTTP/2 and Free Lets Encrypt SSL zones.

SSL zones on MaxCDN are like $20/month the.

https://img.wallpaperkiwi.com/c37590238c32c61aad9dd1220de1f5c5_science-of-how-birds-fly-bird-fly-wallpaper_1600-1200.jpeg

What about Wordfence and KeyCDN? that would be my vote / suggestion

Web Application Firewalls should be server, not cloud based and should be integrated into your hosting plan, not offered as an addon. WP Engine do this for sure.

Cloud based WAF's are bad apparently: https://www.wordfence.com/blog/2016/10/endpoint-vs-cloud-security-cloud-waf-bypass-problem/

Cachefly or KeyCDN would be great. Sucuri is not an option for low budget.

To repeat wahat surbma says, your secururi option is a non starter. It's not even something that could be considered because it's per site and not per server. Imagine having to put that on 100 different sites (which isn't even a lot)... that's 30,000/yr! It's insanity.

3rd party services are not a solution for multisite owners with hundreds of domains on the install. Every provider is adding protection on a domain by domain basis, which is not an option for us.

Please consider a server side DDoS protection, that is independent from the domains pointing to it!

I like KeyCDN vs MaxCDN because KeyCDN has HTTP/2 and Free Lets Encrypt SSL zones.

SSL zones on MaxCDN are like $20/month

We believe the hosting provider / managed wp hosting should cover security so therefore we do not have to add a bloated security package on each application. This reduces the page loading speed significantly and the time it take to configure and manage each site reduces our client productivity. We have been considering other providers recently because of the above issue. We really hope you implement something soon or you will lose customers rapidly. Other competitors are also offering Cloudflare Railgun as a free service. This is a serious game changer!!

We have been using MAXCDN which is good but we are now interested in this solution as it is the cheapest and a reliable alternate = https://www.keycdn.com. I have seen several hosting companies integrate this service for free as a value added feature, along with free SSL (which you have already provided recently :) )

Would be good to have some feedback from Cloudways about what the 'difficulties' were with Cloudflare?

I have used Sucuri before. They are very helpful. I see you are offering an affiliate service, but it would be great if we could set it up with one click from within the Cloudways console.

This is also a good DDoS solution, http://feedback.cloudways.com/forums/203824-service-improvement/suggestions/12302775-add-bitninja-io-security-for-both-server-and-apps

MaxCDN is costly for Singapore traffic. I hope there is a solution for that.

I am using cloudflare and they are pros when it comes to DDoS.

What was the difficulties with Cloudflare? Please elaborate.

A built in DDOS protections would take the cake :)

+2 for CloudFlare
+1 for CDN77 + Sucuri

I agree with Michael. I think it also needs to be affordable. Sucuri + KeyCDN would be a better solution.

Sucuri looks promising and have used MaxCDN before. Do it!

For small to medium traffic, I'm pretty sure Cloudfront will be a more cost efficient solution for most. For this add-on to be successful it needs to be affordable. If the add-on it doubles or triple the hosting cost it will probably not get so much traction. Hosting + Security still need to remain below the price of a fully managed premium hosting for it to be interesting.