Always-on network-level DDoS filtering included with all servers at no extra charge.
Free stateful cloud firewalls with inbound/outbound rules applied per server or label.