Traffic Shaping And Dos Protection In Linux

Is there a way to use traffic shaping in Linux? Like limit traffic to certain port, set priorities etc. Like ex: I'd want to set FTP to use max of 1mbps, http max of 80mbps, and set total to 90mbps.

Also is there ways to setup dos protection within linux? What I'd basically want is if it detects a dos, it either turns off the server, or does some other action that would cut it off either until I take action or for a set amount of time. Think turning off would be only solution since if I just drop packets I'd still be paying for that traffic.

Basically I want to ensure that if I get a DoS I'm not stuck paying insane bandwidth overcharges. I rather have a few days of downtime to deal with, then a few thousand dollars to pay and me having to declare bankruptcy and sell property etc...