Could combine both: a vps running a login-message-only server, that spins up another server and then touches the DNS settings: As a bonus this "fixes" all the issues with proxying (doesn't erase the end user's IP or other such metadata for moderating)