Kano,

I'm sure you're already aware and you have your reasons, but have you thought about utilizing CloudFlare? They offer unlimited DDOS mitigation and their CDN might take a little load off the server. Anyway, it might make it so you don't have to remove login functionality while the DDOS is in effect.