for ddos the best combination is
nginx-varnish-apache as nginx can handle a lot of connections and varnish will serv data from catch...but all this also requires that your server has a very strong cpu (high per core speed in Ghz) and that attack is not over your network capacity.