....using a webserver that can do IP level throttling (Bandwidth and Request Rate)
see this one, http://litespeedtech.com/ http://litespeedtech.com/products/webserver/overview/ . it can also do throttling differently for dynamic and static content requests. We are using this web server and We successfully defeated couple of DDoS attacks in the past. Galen