According the the link below: "All major software disabled renegotiation by default since as far as 2009 (nginx, haproxy, etc...)."

https://security.stackexchange.com/questions/24554/should-i-...