Instead of Varnish, you might want to look at cloudflare.com to deal with load spikes. While not perfect, they can handle many DoS-type situations (be they malicious or not). Full disclosure: I used to work for them.