Full DoS protect is not implemented, but that consists mainly of rate limiting requests based on config. Otherwise, as long as the protocol is complied with the peer is valid, and if not is immediately dropped. We do have ip/host configurable white/black listing as well, but it’s not really a DoS thing and I don’t use it while perf testing sync.