@jerry ah, so you are under a ddos attack.
Cheapest Anycast for the bulk is a requirement IMHO, but I would use a registrar's NS server as one NS with a long TTL (It can be a fun way to fingerprint an attack). In my ideal world, I'd have another authNS capable server on standby to rotate in when under attack to collect data.