L7 DDOS Protection

Has anyone looked at L7 DDOS protection tools that work well with Istio/envoy ? Curious what other companies that use Istio ingress for traffic from the internet use for ddos protection ?

Thanks
Pratima

One option is to use Istio redis quota adapter. However, DDOS protection probably should be implemented in WAF or DMZ layer.