Does Nginx inherently offer DDoS protection?

Nginx doesn't have built-in, fully-fledged DDoS protection in the sense of a dedicated security module activated with a single command. However, it provides several features and configurations that can be leveraged to *mitigate* DDoS attacks, particularly volumetric and some application-layer attacks. These include connection limiting, rate limiting, and buffering.