Websockets are indeed a complication, I'm guessing for haproxy also. But it seems nginx has a recently added feature which can fix this:

https://nginx.org/en/docs/ngx_core_module.html#worker_shutdo...