cf-execd will restart the server in that case, not sure how it helps if the DoS attack is still ongoing.