haproxy-safe-reload Drop SYN packets before reload to force new clients to initiate connection with the new haproxy process. See discussion on StackOverflow: HAProxy graceful reload with zero packet loss. Tested on debian jessie, iptables v1.4.21