The easy way out would be to rely on services like CloudFlare although there are additional costs for administrators of pools
Basic CloudFlare is free and quite enough for DDoS protection as far as websites go (http), but CloudFlare cannot protect the stratum protocol...