True story: fixing a self-DDoS