I had to work for hours over several weeks because Digital Ocean _did_ have DDoS protection, that was awful.
We had an SSH-only machine (that ran backups), but because someone was spraying traffic at the non-operational port 80/443, they kept on disconnecting the network and requiring manual intervention from their support team to reinstate networking.
When we asked them to please stop disconnecting our database backup machine from the network, their answer was "put Cloudflare in front of it". They didn't have the technical knowledge to understand why this was a stupid recommendation.
We solved this by moving everything off Digital Ocean. Like Linode, a perfectly reasonable day-1 solution, and not bad for ancillary services, but not something I'd run production systems on long term.
We had an SSH-only machine (that ran backups), but because someone was spraying traffic at the non-operational port 80/443, they kept on disconnecting the network and requiring manual intervention from their support team to reinstate networking.
When we asked them to please stop disconnecting our database backup machine from the network, their answer was "put Cloudflare in front of it". They didn't have the technical knowledge to understand why this was a stupid recommendation.
We solved this by moving everything off Digital Ocean. Like Linode, a perfectly reasonable day-1 solution, and not bad for ancillary services, but not something I'd run production systems on long term.