Are there any foss, self-hostable tools that can at least approach the effectiveness of cloudflare's various security and anti-ddos features?

If there was a relatively turn-key solution that people could deploy it might help wean people off of cloudflare.