HAProxy Fusion Control Plane vs Rawstream DNS Filtering (2026)