Many pools run failover approaches. Find mine here: Block Producer - Failover Approach with a BP Standby
Maybe not the easiest in terms of the switchover mechanism. But the architecture is similar to your description.
2 Likes