How other people can kill your web server: no fun and little profit (myelin.co.nz)

It appears that Apache, nginx and Perlbal are all fairly trivial for a single client to take down or make inaccessible. Suggestions?