Strengthen IPTV Server Against DDoS Attacks

I run an IPTV server that is experiencing HTTP-based attacks on ports 443, 80 and 8080. These appear to be HTTP Flood or "hit-based" DDoS attacks that generate thousands of requests per second, causing my server’s CPU usage to spike to 100% and making the service unstable.

I need an experienced freelancer to fully set up Cloudflare (PRO plan) to mitigate these attacks, protect vulnerable ports, and stabilize the system.

What I need:
Connect my domain to Cloudflare properly (update DNS if needed).

Configure Cloudflare PRO:

Enable "Under Attack Mode".

Set up custom WAF rules (bot protection, country blocks, etc.).

Configure rate limiting to block HTTP flood attacks.

Ensure HTTP ports (80, 8080) are protected and optimized.

(Optional) Help move the admin panel to an internal or non-standard port.

Optimize web server configuration (Nginx or Apache) to handle malicious traffic more efficiently.

(Optional) Set up iptables rules or Fail2Ban for extra protection on the server level.

Required Skills:
Proven experience with Cloudflare PRO setup and WAF configuration.

Deep understanding of Layer 7 (HTTP) DDoS attack mitigation.

Experience with Linux server administration (Ubuntu/CentOS).

Proficiency in Nginx, Apache, and iptables.

Strong background in web security and server optimization.

(Bonus) Familiarity with IPTV or streaming servers over HTTP.