Massive DDoS attack,please help!

[MGBrose]

I highly doubt your getting DDOSed after being 4 weeks old unless your running a site with some kind of illegal content. Those sites tend to get DDOSed more for moe reasons. Especially by competition.

Also 4 threatening IP addresses from cloudflare is nothing, I have 2.2k "unique threats" per month, amd 83k "threat visits) per month. If 4 ips are ddossing you simply block those IPs from connecting to your server. But a 4 IP DDOS really isn't a ddos at all. This sounds like imporper server configuration and optimization rather than an attack.

We have been running our forum for 10 years and have never had a layer 7 attack that I know of. Also this should be very easy to detect with a tool like munin, where you should see an insane amount of reqests from seemingly legitimate users. Also a small layer 7 attack can easily be mitigated with varnish cache or nginx cache for guests. You really need to consult an server management expert, if you need some legitimate reccomendations pm me, and I'll send you the contact info for a few I have worked with.