Cloudflare, AWS Shield
Avoid expensive operations (db or node hits) from unauthenticated endpoints.