You can’t. If your webserver receives 400m rps it dies, end if story.

Mitigations are just that, mitigations. They are as effective as buying a better door lock to protect your apartment from a nuke.