Linux mitigates CC attacks

First install iptables

Apt-get install iptables

Then set the rule

Iptables-I INPUT-p tcp-dport 80-m connlimit-abve 10-j DROP

10 indicates that an IP address can only open 10 threads; otherwise, packet loss occurs.

If the DDOS volume is large, change it to 5, 3, or something like that ,..

Too small will affect the speed

Then iptables-save>/etc/noddos

Then in/etc/rc. local

Enter iptables-restore/etc/noddos

P.S this blog is using this method, and then published this article, while the blog is being DDOS ..
The amount of protection is related to your server CPU, traffic, and your character...

Source: network security technology blog (safe121.com)