CF Pages would let you dynamically set the custom headers while also hosting the static files at the edge... So regardless of WAF/DDoS protection you'll at least have the site load very quickly using their globally distributed network