Man, I really feel for you because we went through the exact same nightmare last year with our hotel booking platform here in Crete. When the high season starts, competitors or random hackers just love to target local websites to disrupt business. We tried basic server-side tweaks, but nothing worked until we switched our filtering to a professional service. I highly recommend checking out the qrator antiddos network. They have scrubbing centers all over the world, and they filter malicious traffic before it even reaches your server. After we integrated their solution, our site stayed up perfectly even during massive traffic spikes. The best part is that their mitigation happens automatically within seconds, so you don't need to manually monitor anything or panic when an attack starts. It is a bit of an investment, but compared to the lost revenue from a down website during the busy summer months in Crete, it pays for itself almost instantly. Definitely give them a look if you want to save your business and your sanity. Also, being able to track everything on their dashboard is great.