Discourse overloaded real traffic or DDOS? 100% CPU usage despite of decent traffic and high specs server

Well, you need to decide whether the convenience or stable operation of your site is important to you.
During DDoS attacks, there will always be some compromises in the operation of your site.
You can try https://ddos-guard.net