GCP Network has built in DoS mitigation as well (e.g. in the load balancing layer) so you get some protection from that for free.