This was posted in another thread, but thought it could use its own post to make this more visible.
Just to clear up some confusion I am seeing, the DDoS is hitting an L4 bottleneck. This is not something that we have direct control over or any access to implement things like whitelists or ...