Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users. This undoubtedly brings the many attackers that dislike these people with them.
This brings me to a simple question, could a person (granted that they have enough bandwidth, and the attack is layer 7) launch a DDoS attack that would be strong enough to bring down a web server, but not slow down the network. How would they do it? I know botnets have run over Tor, and I know that Tor has used in the past to hide DDoS attackers (mainly skids).
In addition, how could someone protect against a DDoS attack within the Tor network? Given the nature of Tor, is it even possible to set up a firewall that would prevent against it?