No more typing reviews! Try our Samantha, our new voice AI agent.

HAProxy vs The Fastly Next-Gen WAF (powered by Signal Sciences) comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

HAProxy
Ranking in Web Application Firewall (WAF)
13th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
48
Ranking in other categories
Application Delivery Controllers (ADC) (2nd), Distributed Denial-of-Service (DDoS) Protection (6th), Bot Management (5th), Service Mesh (2nd)
The Fastly Next-Gen WAF (po...
Ranking in Web Application Firewall (WAF)
34th
Average Rating
7.6
Reviews Sentiment
4.8
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Web Application Firewall (WAF) category, the mindshare of HAProxy is 2.0%, down from 2.1% compared to the previous year. The mindshare of The Fastly Next-Gen WAF (powered by Signal Sciences) is 1.2%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
HAProxy2.0%
The Fastly Next-Gen WAF (powered by Signal Sciences)1.2%
Other96.8%
Web Application Firewall (WAF)
 

Featured Reviews

Shrinivas Devarkonda - PeerSpot reviewer
Head of DevOps at TripFactory
Handles high traffic efficiently and simplifies complex routing with rule-based logic
I think HAProxy is good as it stands now, but I believe there could be improvements. gRPC has recently been implemented, which is great, along with TLS 1.2 and 1.3 support, and HTTP 2.0 is also available. However, I'm unsure about the benchmark of those HTTP 2.0 requests on HAProxy. If there were any other protocol with better performance than HTTP 2.0, or perhaps mTLS and other similar features, including that in HAProxy would be really great. For improvements, I think that during setup and configuration, the steps provided are neat and clear. Anyone can easily install and configure it. There are many kernel tuning parameters also available, which is great. For specific improvement, in terms of logging, I think printing the full object of the request may help, or if there's a way to reference two requests, it would be beneficial to find a complete session history from a logged-in customer, as it would help analyze customer and user analytics.
reviewer2161107 - PeerSpot reviewer
Staff Engineer at a retailer with 1,001-5,000 employees
Room for improvement with user interface while competitive pricing impresses
It is managed through Infrastructure as Code, so all configurations can be managed in the code itself, which is beneficial. Because it uses rules, it is easy to set up, and we have many different sites where the configurations are straightforward. Though the UI is not very interactive, which is a downside, we can manage many things. The UI is not very intuitive and could be better. However, we manage all the configurations through code, which is easy to maintain. It has extensive anomaly detection capabilities, so the traffic is classified into several categories where thresholds can be defined and customized based on false positives and false negatives. This is advantageous because you do not need to tweak it very often. Once you set it up, an audit once a quarter would suffice. Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ease of use of the configuration, and great documentation, are the most valuable features for us."
"The implementation of the HAProxy load balancing solution will allow Carers ACT to begin to deliver these new services."
"The solution is effective in managing our traffic."
"Tech support is super-quick to respond, and always on target with answers specific to the current issue."
"The most important features would be the load-balancing of HTTP and TCP requests, according to multiple LB-algorithms (busyness, weighted-busyness, round robin, traffic, etc). Another important feature that we cannot live without is the username/passwd authentication for legacy systems that had none."
"We use it as a load balancer for our application servers."
"It’s a reliable product with good technical support."
"With each new release, I find very useful features and love each addition."
"Fastly (Signal Sciences) integrates and tags the intermittent traffic based on patterns. It generates signals and provides them in a dashboard where we can view them and decide whether to allow or deny traffic. It's a more advanced and easy-to-navigate dashboard."
"When configuring a web application firewall using Signal Sciences, we configure a rule whereby no one except a few people can access the application."
"The product's most valuable feature is its ability to set up the rules easily."
"Because The Fastly Next-Gen WAF (powered by Signal Sciences) is API-driven, we have integrations with the CI/CD pipeline through GitHub Actions, making it easy to integrate."
 

Cons

"The product should have more security and dashboard functionality for monitoring so that any administrator can see the usability and track all the incoming and outgoing requests."
"The basic clustering is not usable in our very specific setup. The clustering is mainly a configuration replication and is great in a case of active-passive usage. In the case of an active-active (or with more than two nodes) where the configuration is not fully identical, it cannot be used as-is."
"We've changed solutions as it doesn't fit with our current needs."
"There is room for improvement in the pricing model. It could be cheaper."
"The configuration syntax is powerful yet can become overwhelming for newcomers; a more beginner-friendly interface or a native GUI without relying on third-party tools would ease the onboarding process."
"Documentation could be improved."
"The visibility could be improved."
"We would like to see dynamic ACL and port update support. Our infrastructure relies on randomly allocated ports and this feature would allow us to update without restarting the process."
"Fastly don't support caching for China users. That's the only feature lacking compared to Akamai."
"The areas that could be improved in Signal Sciences include the effectiveness of rules, as many didn't function optimally and required custom rule-writing to address bypasses for WAF."
"The UI is not very intuitive and could be better."
"Even if we create some custom rules, Signal Sciences cannot capture some of the malicious traffic."
 

Pricing and Cost Advice

"HAProxy is free open-source software."
"HAProxy is an open-source solution."
"I use the open-source version of the product. I don't have experience with the licensed version of the solution."
"The licensing fee for the solution is $690 per unit annually."
"The only cost is for the image manager, who is responsible for uploading the image, and that is trivial."
"We use NGINX as well. However, because the health checks are a paid feature, I like to avoid it whenever possible​."
"The product is open source."
"HAProxy is free in the initial offer. However, pricing can be improved."
"The product has an affordable cost."
"The pricing is 50% less than Akamai."
"Signal Sciences is pretty cheap compared to other solutions."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Financial Services Firm
10%
Manufacturing Company
10%
Computer Software Company
10%
Comms Service Provider
10%
Retailer
8%
Financial Services Firm
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise15
Large Enterprise16
No data available
 

Questions from the Community

Do you recommend HAProxy?
I do recommend HAProxy for more simple applications or for companies with a low budget, since HAProxy is a free, open-source product. HAProxy is also a good choice for someone looking for a stable ...
What is your experience regarding pricing and costs for HAProxy?
Since we used the open-source version, we were not concerned about pricing, setup cost, or licensing.
What needs improvement with HAProxy?
For the limited use that I have of HAProxy, I don't have any points to improve. I think I need more time with this tool, or perhaps I simply don't have areas that need to get better. I don't have a...
What is your experience regarding pricing and costs for Signal Sciences?
The pricing is very competitive compared to other providers. The pricing is definitely a factor in our decision-making process.
What needs improvement with Signal Sciences?
We do use it, but the UI can be improved as we mostly work through the CI/CD. It provides support, but sometimes it is hard to navigate unless you are very familiar with it.
What is your primary use case for Signal Sciences?
The CDN is for caching and The Fastly Next-Gen WAF (powered by Signal Sciences) is for protecting the servers from malicious traffic. They both perform different jobs and serve different purposes, ...
 

Also Known As

HAProxy Community Edition, HAProxy Enterprise Edition, HAPEE
Signal Sciences Next-Gen WAF, Signal Sciences RASP
 

Overview

 

Sample Customers

Booking.com, GitHub, Reddit, StackOverflow, Tumblr, Vimeo, Yelp
Chef, Adobe, Datadog, Etsy, GrubHub, Vimeo, SendGrid, Under Armour, Duo, AppNexus
Find out what your peers are saying about HAProxy vs. The Fastly Next-Gen WAF (powered by Signal Sciences) and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.