Worst suggestion that I've seen. So as his site will track user ips, logs, sessions, country, etc?
first of all cloudflare offers DDoS protection for business and enterprise plans (+200 USD): https://www.cloudflare.com/plans
My recommendations are:
-Disable ICPM ping
-Block all ports except...