I recommend checking out UpCloud, RamNode, HostHatch and Jino – all of them expose raw kernel sockets and let you bump the ulimit without hitting a hidden conn‑track ceiling.
Their pricing stays under $10 /month for a 2 vCPU / 2 GB slice, and you can drop a Cloudflare Spectrum layer to tame DDoS without bleeding cash.