Ironically, lying DNS resolvers redirecting nonexistent domains to ads were also helpful in order to mitigate the attack.

DNS being one of the most fragile aspects of the net, a lot of issues can be solving by a local DNS resolver that does a lot of caching and blocking

I recommend pi-hole if you have a Raspberry Pi laying around: https://github.com/pi-hole/pi-hole