Hi,
the flood protection is just one way how to protect the site. I agree with Brenden - you should look for more options how to secure the site from more point of views, it may be too late if all the requests will get all the way to the application - the flood protection won't help if the server itself is down already.
Best regards,
Juraj Ondrus