[quintin]

Mitigate attacks much better than Fastly, flatten CNAME etc.

[bpicolo]

> Mitigate attacks much better than Fastly

if that's the concern, probably just better to configure switching than put both in front all the time.