How can I best protect a Monero service (clearnet) from DDoS attacks while at the same time protecting the privacy of users? The Monero service will require that I provide users with the IP address of my full node, so they are able to connect to it.
While of the following measures are generally seen as less intrusive to the privacy of users:
- Cloudfare with capcha
- Email address confirmation for upon registration and subsequent login with username and password
- Blacklisting of IP addresses that have been involved in previous DDoS attacks