Possible link preview enhancements
This sounds worth exploring. But this would check every link preview so the DDoS would still occur, just over a longer timescale. Perhaps instances with higher trustworthiness could be checked…
LRDD template log flood
I am seeing this behaviour from a couple of other IP addresses - both also seem to microblogpub. I've banned the addresses for now and will also comment on the other bug report.