Is that possible to provide post timeout to prevent DoS ? JBoss AS 7 or WildFly has no such feature/option, but weblogic provides this:
http://docs.oracle.com/cd/E17904_01/web.1111/e13701/web_server.htm#i1059782

Currently only "max-post-size" is supported:
https://docs.jboss.org/author/display/WFLY8/Undertow+%28web%29+subsystem+configuration