DDoS protection. How to organize tcp port proxy protection?

Question

linux

I wanted to make a proxy or tcp port forwarding (traffic is not web). I wanted to hide the IP addresses of application services from strangers. I don't even know how to implement it. There is a server on linux debian with a good 10 Gb / s channel with protection from DDoS attacks, server services have a channel of 100 Mb / s and 1 Gb / s without protection from DDoS attacks.

Answer 1

There was something
https://habr.com/post/417179/

configure Nginx to proxy requests to different ports depending on the domain.