It doesn't matter what "ddos protection device/hardware/software" you have - if you don't have the necessary bandwidth to actually "mitigate" (becaue you cannot STOP) the attack. Example: you have 10G uplink, you receive 11G attack = all your clients are down.
What's the attack size and type you're expecting and what's your budget? There is a variety of different options depending on the attack sizes and your budget and only if you answer these questions, we can make helpful suggestions. CSF won't help against any real DDoS attack.
█ JavaPipe LLC: Global Tomcat Hosting & DDoS Mitigation Solutions
█ In business since 2001 | Contact us: salesrequest[at]javapipe.com
█ Remote Protection | Dedicated Servers | Virtual Servers | Unmetered VPS | Tomcat Hosting