most of our cluster lives on the internal corp network though; if we end up with a ddos on the dmz instance, we can just turn that one off; the cluster will eventually have both distributed and redundant data