Ever wondered how to protect a server without DDoS protection using another one with the protection, or how to enable applications that only allow IPv4 to also accept IPv6?
A Generic Routing Encapsulation (GRE) tunnel will help you with that.
https://community.hetzner.com/tutorials/linux-setup-gre-tunnel