@ericholscher@fosstodon.org is any informations about how large the ddos is (nb ip, nb request, time)?
is there a pattern on the request ?
i do have handle some ddos (but i can't say if there big or small)...
the way was :

• id ip with high request rate
• block them (with nftables or a "low priority").

we where thinking to do the reverse

• id ip who acces to js or something only a browser will acces
• allow them (faster priority than bots traffik).

i don't know enough to be any real help.
i hope you will manage it.