Who or what exactly might be conducting the current DDOS attack against PieFed.Social?
(media.piefed.social)
Is putting a Web Application Firewall (WAF) in front of it not an option? Cloudflare offers it for free for static sites: https://www.cloudflare.com/lp/dg/product/ddos/
There are other hosting providers that offer it as a basic service. This way, the flooding packets are filtered before they even reach the server.
KrebsOnSecurity has been hit a few times with massive DDOS attacks: https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with-near-record-6-3-tbps-ddos/