at about one year ago I had to defend a botnet attack using slowloris. After some less successful tries with mod_antiloris and request timeout settings I also ended up in using mod_qos. The site got up responding and kept going even on the continued attack.