Have you looked into integrating even a free Cloudflare account to help with DDoS and https.  Might be worth consideration and can be setup in mere minutes.  Not sure what type of caching your site could integrate with their CDN but I'd think itd be helpful to stop attacks at their edge.