DDoS FTL
DDoS attacks are probably the most difficult threat to mitigate, full stop. Although hiding origin server's IP address(es) seems like a reasonable counter measure, the vulnerability appears to be inherent in the mechanism rather than a dodgy line of code. My money is on that the fix is going to be quite difficult to implement.