Comment by PhisherPrice

Maybe with a layer 7 attack, but not with a layer 3 attack. The author also described the difference between the proxy request and a legit request, so he can just block the proxy requests. Try using slowhttptest. You don't even need a botnet.