@Ajki and @Sormarler and @let4be
You are right about this and there has long been an awareness of the limitations of the current configuration of IC boundary nodes which has been in place since genesis of the IC mainnet. There has been an ongoing project by Dfinity to rebuild the boundary node architecture and topology as documented in the Boundary Node Roadmap thread. A recent summary of progress was given in November:
So over the next few months we should have new ic-boundary API Nodes being auto-deployed across IC datacentre locations around the world by NNS proposals utilising spare IC Node hardware servers already registered with the NNS. This will expand coverage across the internet for accessing canisters using secure and decentralized API services.
And ic-gateway services which convert HTTP internet requests into ic-boundary API calls will be hosted by node providers, project teams or individual developers and users on their own computers or virtual servers.
The new architecture for these IC boundary services will both improve decentralization and offer much more flexibility to setup more public, protected and private entry points to the Internet Computer. So a solution to blocking or avoiding DDOS attacks and heavy load peaks is on the way soon.
@rbirkner feel free to correct me if anything above is incorrect or misleading