Nginx with Lua module (openresty) looks very promising in terms of performance and capabilities.
https://openresty.org/en/
https://github.com/p0pr0ck5/lua-resty-waf
Have you discovered these and are you considering them as ugly Apache replacement (or alternative)?