Webcreen technology (Gary Milo and another associate) claim they have discovered a way to stop dreaded DDoS attacks. To sum up the article found here :

They mention how impractical it is to sift through router logs when the attack is coming from a vast majority of different IP's and physically blocking the mailicious useres.

"With our technology we inspect packets individually and can decide whether or not to allow them through. This allows us to stop attacks pretty quickly, even if we let a little through in the first place."

Charm - a Webscreen software component, between the net and the webserver acting similar to a bridge with no IP. To make a long story short Charm is supposed to stop attacks almost completley...sounds pretty cool.

"we can prevent 99% of DDoS attack traffic coming through."

I would love to get my hands on this as soon as its out. I guess the most important thing is that it will *always* grant access to the webserver to the best and most trusted customers.
One other thing...what do you guys think this will cost?