wrong i am running... :-( and i have bad experiences...
Fires... Take Downs... High Temperatures (LAS VEGAS - before 2 years)... attacks of brute force... but I am alive and not hacked (you never know) yet
* Well if using mail services and extra web-services like b4j apps ---> will be exposed someway... so every 2-3 years i am changing the ips (painful)
* I am using IPTABLES, route, FAIL2ban techniques... but for example now ... i am under attack from 1800 ips in same time so routing them with software tricks isn't the best from performance...
The best is hardware Firewall with DDOS... if the provider you work now having it for free.. with full protection and is real (with AI, and blacklist of ips of threat centers) will be very good !!!
1) Use 2 loadbalancers installed on vps with haproxy from 2 different datacenters of a company and use hearbeat with attachable ip. This way your requests will come to loadbalancer from your users, and with heartbeat if your main loadbalancer is down for reason, heartbeat will attach your ip to other loadbalancer automatically.
That is very good but not so easy to setupped + it's very big the cost !
2) use at least 2 vps servers as main servers from 2 different
companies, and use health checks with haproxy to switch between them if anything happens to main servers
seems that cost going to be bigger than my dedicated server at my line!
3) connect your cloudflare account to a domain like myweb.com and create a record for loadbalance.myweb.com for example and point it to attachable ip monitored by heartbeat.
in this point i want ot ask - are you paying for cloudflare - or using the free.. and at the free --- what are the limits ?
4) set firewall rules and ddos rules with cloudflare.
(you mean hardware firewall rules at the provider you already using??)