I'm an experienced Web Developer but new to servers. I've been learning on Digital Ocean and one of my sites is being constantly hit with DDoS attacks. I've identified two attacks, one is HTTP GET request flooding which keeps filling up my log files. The other is Wordpress pingback attack.
It was making my site unusable until I installed configured nginx to weed out the fake requests and 444 them and used fail2ban to block the IPs. I even started using Cloudflare but turns out it's not as useful when they have your IP.
So my question is, is this a good strategy? Will what I'm doing now work for these types of attacks? Even now my log files are being filled up. I see even IPv6 addresses in the log files. Fail2ban shows hundreds of blocked IPs but I'm still getting the requests and I'm not sure why fail2ban isn't blocking those. Does fail2ban work with IPv6? Can you suggest me better strategies to deal with such attacks?