I would have preferred fully distributed solution. This one is easy to take down. Also memory snapshots can be take from servers, so disk encryption doesn't help. Not best possible solution afaik.
Disk encryption helps if the load-balancer is taken down before the back-end servers. Unless they are all taken down without 8 hours, then the servers shutdown and require a password to unlock FDE.
