If my server is under a DDoS attack, what steps should I take immediately?

Immediately contact your hosting provider – they may have DDoS mitigation services available. Begin logging the attack details (IP addresses, traffic patterns). Implement rate limiting and geo-blocking if possible. If using a CDN, ensure it's enabled and configured for DDoS protection. Consider temporarily enabling 'under attack' mode on your website to display a static page to visitors.