haproxy mitigated this attack in 2018 as an implementation bug:

https://news.ycombinator.com/item?id=37833365