I am interested in running my own node, but does the software offer DDoS protection in any way? Should I do this at the network layer? What best practices are common here?
No there is no build in DDoS protection.
In my opinion, you have two options:
- External Software like https://github.com/jgmdev/ddos-deflate
- You could whitelist your neighbours with iptables.