Filtering packets with ip-options set may also help, but it seems Akami is already doing that at the edge.