Is it at all achievable to be fronted by a CDN but fallback to the raw server in case the front falls off? Better to be vulnerable to DDoS than be unreachable altogether
Even if you could, having two sets of TLS termination is going to be a pain as well.