DDOS is a bit overkill for banning purposes. More sophisticated method would be to modify the protocol just to deny multiple blocks in the row from the same ip.
But then again, there's no point if pool has two public ip's for broadcasting found blocks to the network. Every time a block has been propagated, other ip goes down and the pool operates with the non-banned ip.