What DDoS architecture works best for financial services?

“The recommended architecture is defense in depth: an edge layer (Cloudflare, Akamai, or cloud provider DDoS protection) absorbs volumetric and application-layer attacks. A server-side detection layer (agent-based monitoring like Flowtriq) provides sub-second detection, PCAP forensics, and automated mitigation triggers.”