http://ciisqbg45nggykdl6rjdrq3wc64csga4vkphu66qsi65mypeitqedoad.onion/blog/port-striping-v3
We couldn't lower that timeout without it affecting legitimate obfs4 traffic, so instead we changed haproxy's logic so that it would check one last time if the traffic obfs4proxy forwarded/de-obfuscated is actually OpenVPN traffic, and if not, drop it immediately so no further resources are wasted. There was also another issue with obfs4proxy taking up resources because of stray BitTorrent traffic hitting the VPN client's exit IP (which in our old setup also acted as an entry IP).