That is why you cache the request. DoS or in your case DDoS since multiple are involved Caching backend responses and having Nginx serve a cached response even for 1 second that cached response can be valid for it will save your day. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271483,271580#msg-271580