L3/L4 DDoS Protection Riyadh: WAF, Rate Limiting & Captcha Challenges