How do the attackers ddos an inhouse deployment that cannot be accessed from the internet without joining a VPN?

They can try to saturate the VPN host maybe, but that's going to be challenging considering that it's going to be limited to connection requests without valid credentials.

and these are likely set to be ignored on multiple failed attempts through fail2ban or similar tooling