Continued tracking through the past three hours seems to suggest at least for now 2 CPUs are sufficient for current traffic levels.

Appears to be high traffic as a result of increased traffic across both sites and not malicious. Collecting data to determine whether number of CPUs needs to be increased.

Noting high CPU usage on HAL. Monitoring for potential DDoS. Rebooted at 12:45am EST.