HAProxy is not affected by the HTTP/2 Rapid Reset Attack
I'm quite impressed with HAProxy.It takes a little effort to fully understand the configuration file format (hint: you've got to read the documentation, not just look at examples to fully grok it), but it's so worth it, IMO.It's also a nice treat to have the founder and technical leader (Willy Tarreau) of the HAProxy company being so active in the community, so many years later (the initital release was in 2001). I regularly see him answering e.g. newbie questions.(HAProxy docs: https://docs.haproxy.org/ - pick 2.8/LTS)