Perhaps something like Cloudflare might serve as reasonable insurance against DDoS?