Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
Realizing a 30 to 50% reduction in latency and page load time, ensuring users experience a seamless workflow.
I have seen a return on investment, particularly in time savings, especially regarding the changes.
Operational efficiency has improved; we no longer have staff consistently monitoring backend servers during deployment or scaling events, as HAProxy's health checks and hitless reloads allow us to push changes with minimal manual intervention.
This resulted in a drastic decrease in costs and, at the same time, the accuracy of the hits coming on HAProxy was almost around 100% or 99.99%.
I estimate seeing a return on investment with HAProxy, as it significantly reduced staff requirements and enhanced scaling capabilities, particularly when transitioning from NGINX, which faced issues.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
demonstrating the team's technical expertise in CDN and Edge architecture
We have SLAs defined because we opted for enterprise support pricing.
We are not getting quick responses from Fastly technical support engineers.
Since we are utilizing the open-source edition, community forums, mailing lists, and GitHub have been invaluable, with typically someone having encountered the same problems we faced.
My interactions with HAProxy's customer support were limited, but the feedback from my team indicated satisfactory service.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
Seamlessly handling massive traffic without requiring backend changes due to its globally distributed Edge network and stateless API-driven design.
We manage an automatic load balancing feature where we add HAProxy servers dynamically behind the application load balancer to handle more traffic.
HAProxy's scalability is excellent; as our traffic expands, it handles load increases effortlessly.
For scalability, HAProxy meets my needs, supporting our initial horizontal scaling and then adapting to vertical scaling in a VMware environment.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
Highly reliable for enterprise-scale applications with high uptime guarantees.
This reliability serves as a key reason for our choice, providing us with confidence even when faced with heavy traffic.
The hot reload feature of HAProxy also really helped us so that we never had to shut it down to reload it.
We have reduced a lot of servers, replacing them with one or two HAProxy servers which deliver better performance, accuracy, and an almost 100% success rate with requests.
The product can improve by having more multitenancy capability, which is currently not available.
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network.
I chose 8 out of 10 because it has excellent performance and low latency delivery, making it suitable for larger applications, with strong Edge Caching and instant purging capabilities.
Fastly could improve by improving the documentation and having some code examples.
Fastly should provide features similar to Cloudflare regarding a block list.
The configuration syntax is powerful yet can become overwhelming for newcomers; a more beginner-friendly interface or a native GUI without relying on third-party tools would ease the onboarding process.
An easier desktop interface to connect to a remote server and make changes on my PC would be beneficial.
The reloading functionality is effective as it allows soft reloads without interrupting traffic patterns.
It operates on a pay-as-you-go structure, but costs scale with traffic, requiring monitoring to avoid unexpected spikes based on data transfers and the number of requests handled.
In terms of price, I find it good.
Since we use the open-source edition, there are no licensing fees, with the main cost being the infrastructure running on EC2 instances in AWS, which helps maintain low expenses.
Setting up HAProxy didn't cost anything for me.
The pricing remains competitive compared to other vendors.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
Cloudflare Web Application Firewall's advanced reporting and analytics tools add a layer that we're able to visualize and see before it actually hits the local firewall.
The best feature that Fastly offers is the Edge location, which reduces latency, making our applications work smoother because we do not have to constantly call the backend.
Fastly has a wide number of configuration features that can be performed, and I emphasize that they can be done from code, which makes it much more traceable.
In this project, it is working as a reverse proxy for CDN and WAF, web application firewall, additionally image optimization.
By moving all SSL termination to the load balancer, I now manage certificates in a single place, and I can also utilize Let's Encrypt with HAProxy's built-in ACME support, making renewal automatic.
HAProxy positively impacted our organization by exceeding scalability expectations, initially projected at 200k requests but ultimately handling over 15 million transactions per second without any issues.
As a production engineer at that time, I definitely wanted to ensure that the system could handle massive connections, especially since we operated an e-commerce platform where we could not lose any customer calls.
| Product | Mindshare (%) |
|---|---|
| Cloudflare Web Application Firewall | 4.0% |
| HAProxy | 2.0% |
| Fastly | 2.3% |
| Other | 91.7% |


| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 6 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 6 |
| Large Enterprise | 7 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 15 |
| Large Enterprise | 16 |
Cloudflare Web Application Firewall integrates DDoS protection, load balancing, and firewall capabilities. Its ease of use, configurability, and robust security measures make it a versatile choice for protecting web applications.
Cloudflare Web Application Firewall provides a comprehensive defense against threats with advanced reporting and robust security measures. It includes DNS integration, rate limiting, and extensive rule sets, all within a SaaS model that allows API configurability. Users value its caching, scalability, and pricing, although enhancements are needed in rate-limiting and third-party integration. Improvements in customer support, especially in India, real-time controls, and user documentation are also desired. Users seek a more intuitive dashboard, better log management, and improved alert systems, along with multitenancy capabilities and enhanced reporting.
What are the key features of Cloudflare Web Application Firewall?Cloudflare Web Application Firewall finds application in industries like banking and retail by acting as a comprehensive security gateway, managing authentication and authorization while protecting web applications from malicious Layer 7 traffic. It also implements load balancing, CDN, and zero-trust policies, supported by advanced reporting, analytics tools, and threat scoring to meet specific industry needs.
Fastly is a leading provider of content delivery network services that enhances website performance through efficient caching and real-time architecture capabilities.
Fastly integrates CDN technology with advanced web application firewall for comprehensive security. Its global infrastructure supports performance enhancement, rapid deployment, and rollback capabilities. Utilizing the VCL language allows custom caching solutions. Compute@Edge provides extensive architectural flexibility, aiding in HTML manipulation and script execution. Users benefit from its stability and reliability features for seamless network protection, log management, image optimization, and A/B testing. Challenges include limited support in mainland China, inadequate WebSocket protocol implementation, and complex pricing structures.
What are the key features of Fastly?Fastly is widely implemented in industries needing robust content delivery and security capabilities. Companies use it as a reverse proxy for media delivery, ensuring availability and optimized performance. Its rapid deployment and rollback features are particularly beneficial in technology sectors requiring agile responses to demand shifts.
HAProxy delivers reliability, high performance, and efficient load balancing solutions. Its open-source model ensures cost-effectiveness and scalability, ideal for managing extensive infrastructure demands with minimal latency while offering seamless integration with modern platforms.
HAProxy is renowned for its robust performance in load balancing across TCP and HTTP protocols, featuring multiple algorithms such as round-robin. Users appreciate its customizable configuration and seamless SSL termination, which make it an excellent choice for managing complex infrastructures. The platform's open-source nature supports scalability, reducing costs while providing flexible proxy operations. HAProxy efficiently handles high concurrency, enabling smooth traffic management and ensuring stability within diverse systems.
What key features does HAProxy offer?HAProxy is extensively used in load balancing implementations across various sectors. Companies deploy it for managing high traffic, Layer 4 and Layer 7 applications, and SQL databases. It supports microservices architecture, performs SSL offloading, and manages email services like SMTP. As a reverse proxy, HAProxy delivers high availability for systems like Redis, RabbitMQ, and Apache while integrating with Docker and Kubernetes. Its features enhance web application firewall capabilities and traffic routing, making it suitable for industries demanding reliable and efficient network management.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.