haproxy-protection is an alternative.