So, the reported DDoS attack was not really distributed (sustained and ongoing), but we wanted to be cautious and take the site down while we investigated a bit. It was primarily a timing issue in terms of what performance was telling us and we wanted to understand it fully. The system handled it fine, and we've learned some interesting things in the process. We'll be moving to mitigate issues like this even more in the future. All's well and good.