Hello, if you are getting ddos attacks I recommend you next tips to stop ddos from occuring!:
- Changing the domain so hackers cant ddos your site again
- Activating cloudflare with everything setup at at maximum level (I recommend you setting a captcha for every visitator using firewall rules)
- Use aggresive caching and block countries like China, india, and other countries that ddos attack occur
- Consider migating every ddos attack. There are a lot of github projects that could help you using php and javascript