You will want to use the firewall that your VPS provider provides for you. Using a host based firewall will be far less effective in fighting a DDoS since the traffic does get to your network stack.
3 Likes