We had that except it was our own frontend developers. We also had some actual attacks so we made a system that detect anomalies (like more than 50rps per IP)

We had that except it was our own frontend developers. We also had some actual attacks so we made a system that detect anomalies (like more than 50rps per IP) and raises alert. ...which was thwarted by frontend developers again, as they loaded few hundred tiny icons at once that triggered that alert routinely, and only thru http2 multiplexing their idiotic design patents haven't bitten them before.