It seems, that you and BCNext need to find a way to modify Jetty core, or something, to make Hallmark-based (at least) protection. To buy expensive VPSs, wich would be the first target - it is not a is not an option .. it is centralization ...
Jetty has
http://wiki.eclipse.org/Jetty/Reference/DoSFilter... But I prefer to leave this work for those who know Jetty much better than me.