Given that protecting the source IP is not a goal (keyspace is far too small for that), why use something like MD5 when something like CityHash or MurmurHash3 would do?
We have a fast MD5 implementation available through ngx_lua so using it is easy. Using one of the hashes you propose would have meant creating an API to access one of them and adding them.