Also, before doing anything else, try using: tune.disable-zero-copy-forwarding or tune.h1.zero-copy-fwd-recv off
as there is currently an open bug that doesn't fully match your case but is still close enough that it may be worth a try: https://github.com/haproxy/haproxy/issues/2665 Lukas
