To protect against DDoS attacks directed at a specific site, you should use specialized traffic filtering services like Cloudflare, DDoS-GUARD, Incapsula, Project Shield.