the normal way to do this is to run your static content through CDN's and allow your dynamic content to hit origin.
you're not saved from DDoS of course, but you'd be surprised at how much cookies for static content can cost you in CDN costs; usually people use a separate domain.