dbzer0 is using haproxy with haphash successfully to mitigate.

https://github.com/dgl/haphash

He might be willing to share the uri/paths to approve in your proxy config to deploy haphash or anubis etc.