If you can't have any interruption then you have to cluster.
MB can use CCR but that means you need 2 servers. You also cannot have HT and CA roles on that server.
You can join HT and CA on a separate server however to make sure rebooting that doesn't cause an issue you will need to NLB them (HT excluded).
Edge suffers the same unless you setup a separate path inbound to the HT servers but in that scenario you will need to make sure you have another way of virus scanning.
What are you going to do with the Edge server to make it worthwhile?
cheers
Andy