3) just track down the people and arrest them. DDoS is already a felony, and residential proxies aren't untraceable to law enforcement.