Is it really a DDOS or piefied just unable to handle an influx of users? Does piefed scale horizontally? Is it async? Does it spawn a thread per request or does it work from a thread/process pool?
Without having looked at the code, my suspicion would be rather that it can't handle thousands of users concurrently and just 20k users trying to use it at the same time looks like DDOS. Piefed is probably nowhere near v1 or has never been tested for performance.
I'd much rather see some evidence for a DDOS e.g a graph showing number of connections to the server, a graph of response time, number of database connections, of something. Just saying "DDOS" when it might just be the software struggling to keep up with legitimate users seems questionable.
P.S this isn't a slight at the piefed devs - performance is usually the last thing on someone's mind who just wants to ship things quickly. Especially with such a demanding and uneducated public that doesn't understand these are unpaid individuals contributing, not paid workers working on the code 9-5, 5 days a week, 50 weeks a year.






Why the hell is this even possible? Why should a web page have access to the extensions you run?