How to protect a web app against a DDoS attack without Cloudflare?

Hi all,

Let's say you are building a web app and you want to protect it against DDoS attacks. Cloudflare is an obvious choice (or AWS, Google, Azure, etc.). In order for it to function well it will be unencrypted on there platform at some point. You can encrypt it up till them and from them to the endpoint, but not through them. That is an obvious privacy issue.

​

So now the scenario becomes, we have the need for …

app attack cloudflare ddos ddos attack privacy protect web