I have setup a mining pool for a smaller project that uses Cryptonight variant 1. I have been running into problems with ddos attacks when other people started launching other mining pools.
At first it was layer7 attacks which hammered my webserver and i managed to successfully mitigate them. However attacks are still inbound on my actual pool ports 3333/5555/7777/8888 and my server rejects shares every now and then because of that.
Cloudflare can't help because i would need an enterprise package for that which is way to expensive. Blocking ip's manually is also a no go since source Ip's are spoofed.
I followed this guide to get some more layer4 based protection https://javapipe.com/ddos/blog/iptables-ddos-protection/
However i feel like there is more i can do. Suggestions are very welcome.