How can I protect customers' domains from DDOS attack in Multi-tenant App?

Question

I have multi-tenant app. myproject.com. It is using Cloudflare DNS provider to protect from DDOS attack.

Customers will get subdomain like customer