Hello,
I have not tried this yet, however I have found another post with a possible solution:
http://serverfault.com/questions/177461/how-to-rate-limit-in-nginx-but-including-excluding-certain-ip-addresses
Please let us know if you succeeded in whitelisting IPs, and I will also report back if I find a working solution.
Best regards,
Jonas Kaufmann