Is the backend node? There's a module called `express-slow-down` which saved my biggest site during a DoS (and continues to protect). Quick to implement. Can send you example code if it would help.