As the Qt network code might already have accepted incoming connection, and buffered incoming data, handling flooding or DDoS in the HTTP server might be too late.

Evaluate the available APIs in QtNetwork code to see what functionality might be missing in order to allow effective protection of a server process. For example

• defining a blacklist/whitelist of IP addresses
• rate limiting (slow down brute-force connection attempts)