Cloudflare does a pretty good job of managing it, at the cost of some centralization.

It would be pretty cool if there was a way to DDOS-harden at the protocol layer. Not sure if that’s even possible though