Using HTTP POST for denial of service

This is news? When I wrote Perlbal (http://www.danga.com/perlbal/) I explicitly "defended" against this, not because of attacks but because I didn't want backends wasting time & memory reading requests from slow clients (where slow == not 1 Gbps).

Perlbal can buffer POSTs in memory up to a given time/space threshold, and then spill to disk until received, and the blast it away at the backend once fully received.

So just put Perlbal in front of it. (It's in front of LiveJournal, TypePad, etc...)