My test bench rig running the exact same nvOC build on a separate network is not having this issue at all.
Have you manually applied ubuntu updates?
Have you changed the default password in nvOC?
Is someone running DDoS against your IP or the DDoS is initiated from your rigs against someone else?
I have verified the integrity of the latest nvOC image, changed the default password, enabled UFW and only allowed port 22. ISP has no indications of an external attack or an attack originating from me. I have not applied any Ubuntu updates since the release of 19-1.4 beta. I have a feeling that is the ultimate cause for my issue is that someone is taking advantage of an exploit that I haven't patched yet. I have re-imaged twice now and it keeps occurring. My router firewall logs show "WANATTACK" and IPV4 and IPV6 drops.