http://blog.exceliance.fr/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/

Good article about advanced HAProxy configuration, including timeouts for different phases of HTTP request different variants for rate limiting