Just use a CDN to deliver the webiste, that will be the best protection against a **Ditributed** DOS attack.