Just offer DDoS mitigation using specialized hardware and don't force people to buy N+1 instances.