Added iptables rules (might be overkill but better safe than sorry) to save cpu resources when mitigating DDoS ( or to use on low performant hardware) and enabled/disable specific kernel mods for further DDoS mitigation.

Also left lots of comments to hopefully accurately explain the reason for the addition/removal of certain configs.


I hope this helps improve your project (even though I'm not the neatest