Try our new research platform with insights from 80,000+ expert users

HAProxy vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
HAProxy
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
44
Ranking in other categories
Application Delivery Controllers (ADC) (3rd), Web Application Firewall (WAF) (18th), Distributed Denial-of-Service (DDoS) Protection (10th), Bot Management (9th), Service Mesh (2nd)
The Fastly Next-Gen WAF (po...
Average Rating
7.6
Reviews Sentiment
4.8
Number of Reviews
4
Ranking in other categories
Web Application Firewall (WAF) (28th)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Mehdi El Filahi - PeerSpot reviewer
Useful for for small and quick load-balancing tasks
What I like best about the product is its simplicity and speed. When you need to set up a load balancer quickly, HAProxy offers options like sticky sessions and round-robin. It's also fast to configure, including adding SSL for security. While it may have fewer options than other solutions like F5, HAProxy gets the job done for basic load-balancing tasks. The reliability features of HAProxy were particularly useful in a scenario where I needed to test load balancing between two Tomcats. Since these domains were inaccessible, I set up a third Docker with HAProxy, which had access to the Tomcat domains. I then configured HAProxy to handle the load balancing. This setup allowed the client to interact with HAProxy. The solution's integration with other elements is easy.
Shashank N - PeerSpot reviewer
Provides good stability, but the agent-based approach could be more convenient
The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF. Additionally, the agent-based approach presents challenges with managing agents across versions and dependencies on specific application platforms like Apache or NGINX, leading to compatibility issues and complexity in integration. This agent-based system proved particularly difficult to manage.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a stable solution. I rate the stability a ten out of ten...I rate the scalability a ten out of ten."
"We're using dynamic components to build flexible pages to create and manage Git merge requests for code and reviews."
"The overall experience with Cloudflare is positive, with a rating of eight out of ten."
"The tool is user-friendly."
"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"It is a fast and secure DNS."
"Centralized, full-featured DNS."
"The most valuable features of the solution are performance and security."
"We use the solution for load balancing."
"It reduced the load on our main load balancers."
"The most important features would be the load-balancing of HTTP and TCP requests, according to multiple LB-algorithms (busyness, weighted-busyness, round robin, traffic, etc). Another important feature that we cannot live without is the username/passwd authentication for legacy systems that had none."
"Performance configuration options with threads, processes, and core stickiness are very valuable."
"The features I find valuable in this solution are session control which automatically disconnects users that forget to log off, and the ability to write rules to either allow or block certain file requests."
"It is scalable."
"HAProxy's TCP load balancer is excellent and super stable."
"I can't speak to all of the HAProxy features because we don't use them all, but load balancing is very good."
"The product's most valuable feature is its ability to set up the rules easily."
"Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
 

Cons

"It would be beneficial for us if Cloudflare could offer a scrubbing solution. This would involve taking a snapshot of my website and keeping it live during a DDoS attack, ensuring uninterrupted service for our users. DDoS attacks are typically short in duration, and having Cloudflare maintain the site's availability from its secure network would enhance the overall user experience. I would appreciate it if Cloudflare could consider implementing this feature. Many organizations already utilize similar capabilities in their CDN platforms, where a static snapshot of the web page is displayed during DDoS attacks. In terms of features, Cloudflare needs to enhance its resilience and stay more focused on adopting new technologies. For instance, solutions like F5 XC Box, Access Solution, and Distributed Cloud Solution have impressive features, and Cloudflare should strive to match and exceed those capabilities. There's a need for improvement in areas like AI-based DDoS attacks and Layer 7 WAF features. Cloudflare should prioritize enhancements in areas such as behavioral DDoS and protection against SQL injection attacks, considering the prevalent trend of public exposure to the internet for business reasons. Overall, Cloudflare needs to invest more in advancing its feature set."
"It should have easier documentation for the configuration. It's very technical and people who aren't technical should also be able to do the configuration."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"An integrated SSO feature would be useful for Cloudflare DNS."
"I believe they currently have this feature, but there will most likely be integration with APIs so we can control some features through API."
"Areas like how assessment, discovery, and payload are dealt with and how it all comes into your organization can be considered when trying to make suggestions to Cloudflare for improvements."
"For the free and Pro plans, Cloudflare could use a simple bot to provide information to users. This would improve support, especially for less advanced users who utilize the free components."
"Support response time could be improved."
"We would like to see dynamic ACL and port update support. Our infrastructure relies on randomly allocated ports and this feature would allow us to update without restarting the process."
"The product does not have any new technologies."
"The visibility could be improved."
"The solution's dashboards and reports could be improved."
"An alerting system would be better as I need to check log files if any backend is down."
"There are three main areas to improve: 1) Make remote management more modern by adding API. 2) Propose a general HA ​solution for HAProxy (no I'm using keepalived for this). 3) Thread option should be a bit more stable."
"We've changed solutions as it doesn't fit with our current needs."
"Dynamic update API. More things should be possible to be configured during runtime."
"The UI is not very intuitive and could be better."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
 

Pricing and Cost Advice

"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"The price of the solution is expensive."
"The solution has many features but there are ones that you need to pay for. Sometimes you have to find out which is available for free and which you have to pay for."
"The price is reasonable."
"We are using the free version."
"I give the price a five out of ten."
"The tool is a premium product, so it is very expensive."
"For Cloudflare, I recommend it heavily for small businesses with revenue under a couple of million dollars. Onboarding is easy, and they even have a free plan. This makes it simple for businesses in the $100,000-$500,000 range to try it out and see its value, allowing them to scale up their infrastructure as needed."
"It is free of cost."
"The licensing fee for the solution is $690 per unit annually."
"When it comes to pricing HAProxy is free."
"If you don't have expertise then go with the licensed version. Otherwise, open-source is the best solution."
"We use NGINX as well. However, because the health checks are a paid feature, I like to avoid it whenever possible​."
"I think that the pricing is very fair, I would definitely recommend buying the Enterprise license."
"HAProxy is an open-source solution."
"HAProxy is free open-source software."
"The pricing is 50% less than Akamai."
"The product has an affordable cost."
"Signal Sciences is pretty cheap compared to other solutions."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
873,085 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
18%
Financial Services Firm
10%
Comms Service Provider
9%
Manufacturing Company
8%
Manufacturing Company
13%
Computer Software Company
11%
Retailer
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise13
Large Enterprise15
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
Do you recommend HAProxy?
I do recommend HAProxy for more simple applications or for companies with a low budget, since HAProxy is a free, open...
What do you like most about HAProxy?
The solution is effective in managing our traffic.
What is your experience regarding pricing and costs for HAProxy?
Our experience with pricing, setup costs, and licensing has been quite straightforward. Since we use the open-source ...
What do you like most about Signal Sciences?
The product's most valuable feature is its ability to set up the rules easily.
What is your experience regarding pricing and costs for Signal Sciences?
The pricing is very competitive compared to other providers. The pricing is definitely a factor in our decision-makin...
What needs improvement with Signal Sciences?
We do use it, but the UI can be improved as we mostly work through the CI/CD. It provides support, but sometimes it i...
 

Also Known As

Cloudflare DNS
HAProxy Community Edition, HAProxy Enterprise Edition, HAPEE
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Booking.com, GitHub, Reddit, StackOverflow, Tumblr, Vimeo, Yelp
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about HAProxy vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: September 2025.
873,085 professionals have used our research since 2012.