DDoS issues are getting out of control. It would be a good idea to integrate mod_evasive apache module to mitigate them.

I was suggested by the support team to mitigate the attack using app level firewalls but that's far to be an optimal solution.

They confirmed that the current infrastructure of their servers is not ready for adding this apache module but they are open to evaluating it as an option.