Movatterモバイル変換

February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service

HAProxy patch for two high-severity QUIC vulnerabilities (CVE-2026-26080, CVE-2026-26081) that allow a remote denial of service attack. Upgrade now for protection or disable the QUIC component.

Zero crashes, zero compromises: inside the HAProxy security audit

HAProxy's security audit validates its zero-bug core and robust architecture. The key takeaway: security is a shared responsibility, demanding careful configuration and adherence to best practices.

How Dartmouth avoided vendor lock-in and implemented LBaaS with HAProxy One

By prioritizing automation and architectural freedom with HAProxy One, Dartmouth moved past the cycle of rising costs and closed ecosystems.

Properly securing OpenClaw with authentication

OpenClaw is taking over the world. However, it's brand new and its security posture is mostly unknown. Follow along as we secure OpenClaw using a battle-tested method with HAProxy.

Universal Mesh in action: how PayPal solved multi-cloud complexity with HAProxy

PayPal’s Meridian is a powerful real-world use case of Universal Mesh succeeding at enterprise scale.

Announcing HAProxy Kubernetes Ingress Controller 3.2

HAProxy Kubernetes Ingress Controller 3.2 and HAProxy Enterprise Kubernetes Ingress Controller 3.2 have arrived! These releases add powerful, user-defined annotations and a new frontend CRD.

How LinkedIn modernized its massive traffic stack with HAProxy

Facing rapid growth and changing technical needs, LinkedIn made the strategic decision to redesign its traffic stack around HAProxy.

Fresh from AWS re:Invent: Supercharging HAProxy Community with AWS-LC Performance Packages

New HAProxy 3.3 and AWS-LC Performance Packages give you 50% faster TLS and linear scaling, ending a core bottleneck with other libraries.

Sanitizing HTTP/1: a technical deep dive into HAProxy’s HTX abstraction layer

Thanks to its design, almost all attacks that have appeared on HTTP/1 since the arrival of HTX have had no effect on HAProxy.

HAProxy Enterprise WAF Protects Against React2Shell (CVE-2025-55182)

Protect your infrastructure from React2Shell (CVE-2025-55182) using HAProxy. Learn about immediate mitigation strategies and automatic WAF protection.

Revolutionizing application security with the next-gen HAProxy Enterprise WAF

Explore the groundbreaking Intelligent WAF Engine and the key performance metrics that redefine industry standards.

Efficiency at any scale: How HAProxy maximizes the benefits of modern multi-core CPUs

Explore how HAProxy intelligently harnesses the power of modern multi-core CPUs while navigating challenging architectural complexities like NUMA.

KubeCon NA 2025: Universal Mesh, federation, and the end of the "mesh tax"

At KubeCon, we asked a simple question at our booth: "How much is your service mesh costing you?"

How Roblox uses HAProxy Enterprise to power gaming for 100 million daily users

Learn how Roblox's innovation journey with HAProxy provides a powerful blueprint for any organization that must deal with hyperscale growth efficiently, while maintaining robust security throughout.

Announcing HAProxy 3.3

HAProxy 3.3 brings downloadable packages compiled by HAProxy Technologies, numerous TLS enhancements, better observability, and many improvements to performance and flexibility.

Ingress NGINX Is Retiring. Here’s Your Path Forward with HAProxy

Ingress NGINX is retiring in March 2026. Migrate now to the HAProxy Kubernetes Ingress Controller for a superior solution and a seamless path to Gateway API.

Announcing HAProxy Unified Gateway (beta)

Announcing the public beta for HAProxy Unified Gateway – a free, open-source product providing Kubernetes-native application routing for Gateway API and Ingress.

Announcing HAProxy ALOHA 17.5

HAProxy ALOHA 17.5 delivers powerful new capabilities that improve security and performance — while future-proofing HAProxy ALOHA to enable richer features and advanced functionality.

Announcing HAProxy Enterprise 3.2

HAProxy Enterprise 3.2 brings next-generation security intelligence, extends its industry-leading performance, and expands the native routing and integration capabilities in HAProxy Enterprise.

October 2025 – CVE-2025-59303: secret leak in HAProxy Kubernetes Ingress Controller

Upgrade to the lastest version of HAProxy Kubernetes Ingress Controller (KIC) to address a vulnerability allowing privilege escalation. Learn about affected versions, remediation, and workarounds.

October 2025 – CVE-2025-11230: denial of service vulnerability in HAProxy mjson library

The latest versions of HAProxy Community and Enterprise have patches for a critical denial of service vulnerability in the mjson library.

Black Hat USA 2025 recap

This year at Black Hat USA, the conversation focused on model context protocol (MCP), agentic workflows, and how security fundamentals still matter.

HAProxy Enterprise WAF protects against Microsoft SharePoint CVE-2025-53770 / CVE-2025-53771

CVE-2025-53770 and CVE-2025-53771 are currently being exploited in the wild. However, users of HAProxy Enterprise WAF are protected automatically.

HAProxyConf 2025 Recap

A recap of the new product announcements, customer presentations, and key takeaways from HAProxyConf 2025.

Announcing HAProxy 3.2

HAProxy 3.2 gives you more of what matters most: exceptional performance and efficiency, best-in-class SSL/TLS, deep observability, and flexible control over your traffic.

Protecting against SAP NetWeaver vulnerability (CVE-2025-31324) with HAProxy

Mitigate SAP NetWeaver CVE-2025-31324 with HAProxy. Learn how to block unauthenticated file uploads and protect your systems from severe risk.

The State of SSL Stacks

The SSL landscape has shifted dramatically, raising questions about performance, efficiency, and costs. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.

Lessons learned in LLM prompt security: securing AI with AI

We are experimenting with AI for prompt security in AI Gateways. Discover key lessons, performance issues, and how to optimize for practical use.

Choosing the right transport protocol: TCP vs. UDP vs. QUIC

A decision-making framework breaking down the strengths, weaknesses and ideal use cases to help users choose the proper protocol for their systems.

HAProxy goes big at KubeCon London 2025

Attendees were stunned by the scale of our presence at KubeCon London and the breadth and depth of our solutions — enabled by the HAProxy One platform.

Load Balancing VMware Horizon's UDP and TCP Traffic: A Guide with HAProxy

Learn how to load balance VMware Horizon's complex UDP and TCP traffic using HAProxy's stateless stickiness. Improve remote desktop performance and reliability.

Protecting against Next.js middleware vulnerability CVE-2025-29927 with HAProxy

A recently discovered security vulnerability requires attention from development teams using Next.js in production environments.

Announcing HAProxy ALOHA 17.0

HAProxy ALOHA 17.0 introduces the new UDP Module and extends network management to the Data Plane API, a new API-based approach to network configuration.

Announcing HAProxy Enterprise 3.1

HAProxy Enterprise 3.1 delivers a brand new ADFSPIP Module and enhancements to the HAProxy Enterprise UDP Module, CAPTCHA Module, Global Profiling Engine, and more!

Reviewing Every New Feature in HAProxy 3.1

HAProxy 3.1 makes significant gains in performance and usability, with better capabilities for troubleshooting. Our blog post explores all the updates.

Announcing HAProxy Kubernetes Ingress Controller 3.1

HAProxy Kubernetes Ingress Controller 3.1 introduces expanded support for TCP CRDs, runtime improvements, and parallelization when writing maps.

Announcing HAProxy Enterprise Kubernetes Ingress Controller 3.0

HAProxy Enterprise Kubernetes Ingress Controller 3.0 is packed with powerful new features that bring greater control, performance, and observability to managing Kubernetes environments.

January 2025 – Multiple rsync CVEs impacting memory and file handling in Linux virtual images

The latest versions of HAProxy Fusion fix multiple rsync vulnerabilities related to memory handling and file management in HAProxy Fusion’s Linux-based virtual images. We will cover these CVEs here.

Lasting Impressions and Technical Tidbits From AWS re:Invent 2024

AWS re:Invent 2024 has officially wrapped up, but not everything that happens in Vegas stays in Vegas. Here are some key takeaways from our five days spent with AWS and app delivery enthusiasts.

Announcing HAProxy ALOHA 16.5

HAProxy ALOHA 16.5 is now available, bringing the new Bot Management Module, the new Network Management CLI, and more!

Announcing HAProxy 3.1

HAProxy 3.1 brings improvements to observability, reliability, performance, and flexibility.

KubeCon NA 2024: service discovery, security, and AI — oh my!

Though KubeCon North America 2024 has officially come to a close, the CNCF's flagship event has left us buzzing with residual excitement. Here's what we've learned throughout those four days.

Announcing HAProxy Enterprise 3.0

HAProxy Enterprise 3.0 extends HAProxy Enterprise’s legendary performance and flexibility and builds upon its cornerstone features.

Nearly 90% of our AI crawler traffic is from TikTok parent ByteDance – lessons learned

TikTok’s web scraper, Bytespider, is reportedly aggressively sucking up content to fuel generative AI models. We also noticed this while reviewing bot management analytics. Here's what we've learned.

Announcing HAProxy Fusion 1.3

HAProxy Fusion 1.3 is now available! New custom dashboards, high-performance Kubernetes service discovery, and optimized workflows bolster HAProxy Fusion's observability and flexibility.

Encoding HAProxy logs in machine-readable JSON or CBOR

The addition of JSON and CBOR encoding in HAProxy 3.0 streamlines log management and improves interoperability between systems.

HAProxyConf 2025 call for papers now open

The wait is over! HAProxyConf is coming to San Francisco, California, from June 3 to 5, 2025.

Announcing HAProxy Data Plane API 3.0

Following the recent HAProxy 3.0 release, we're proud to announce that we've released HAProxy Data Plane API 3.0, which is available on our GitHub page.

Easily Remove Existing HAProxy Connections Made via Client Authentication

HAProxy Enterprise lets you immediately drop connections and remove the client if their certificate is revoked. Here's how to strengthen security without disrupting other users and customers.

September 2024 – CVE-2024-45506: endless loop in HTTP/2 with zero-copy forwarding in HAProxy

The latest versions of our products fix a vulnerability related to a possible endless loop in the HTTP/2 multiplexer when combined with zero-copy forwarding system in HAProxy, HAProxy Enterprise...

How To Identify Requests as Part of an End-To-End Tracing Strategy

Learn how HAProxy Enterprise can help financial services uniquely identify requests as part of a greater end-to-end tracing strategy.

Zero-trust mTLS automation with HAProxy and SPIFFE/SPIRE

Securing traffic between systems is critical. Follow along as we explain how to use SPIFFE and SPIRE to automatically generate and renew identities that include mTLS certificates.

How to achieve ultimate freedom with your load balancer

Learn why flexibility is key in modern tech stacks, how a flexible load balancer can help, and how HAProxy's unique approach gives you more freedom.

Load Balancing RADIUS With HAProxy Enterprise UDP Module

HAProxy Enterprise now supports RADIUS load balancing with the new HAProxy Enterprise UDP Module. We'll outline the challenges with implementing RADIUS load balancing and how to solve them.

How to Reliably Block AI Crawlers Using HAProxy Enterprise

AI crawlers from large language model (LLM) companies often ignore the contents of robots.txt and crawl your site. If blocking AI crawlers is your goal, HAProxy Enterprise is the answer. Here's how.

The Customer Feedback Loop That Makes HAProxy G2’s Satisfaction Score Leader

HAProxy received a Satisfaction Score of 98 in the G2 Grid® Reports for Summer 2024, and that's no accident. See how HAProxy responds to user feedback to provide a world-class customer experience.

Create an HAProxy AI gateway to control LLM costs, security, and privacy

The introduction of ChatGPT caused sharply increased interest in large language models (LLMs). These AI apps also have unique deliverability concerns. Here's how an HAProxy AI gateway can help.

Scalable AWS Load Balancing and Security With HAProxy Fusion

Read highlights from Jakub Suchy's talk describing how HAProxy Fusion enhances both scalability and security for applications, including Kubernetes applications, on AWS.

July 2024 – CVE-2024-24791: HTTP/1.1 response code mishandling in golang products

The latest versions of our products fix a vulnerability related to HTTP/1.1 response code mishandling in products written in golang.

July 2024 – CVE-2024-6387: RCE in OpenSSH server

The latest versions of our products fix a vulnerability related to OpenSSH’s server (sshd), which is used in the public/private cloud images of HAProxy Enterprise...

Reviewing every new feature in HAProxy 3.0

HAProxy 3.0 brings many improvements to simplicity, security, reliability, flexibility, and more. We'll dive into what’s new with detailed examples. It’s a long list, so get cozy and bring a snack!

Announcing HAProxy Kubernetes Ingress Controller 3.0

HAProxy Kubernetes Ingress Controller 3.0 is now available. In this release, we've added TCP custom resource definitions (CRDs) to improve mapping, structuring, and validation for TCP services.

Announcing HAProxy 3.0

HAProxy 3.0 maintains its edge over alternatives with best-in-class load balancing. Ready to upgrade? Here’s how to get started.

Announcing HAProxy ALOHA 16

With HAProxy ALOHA 16 comes our next-generation WAF, new load balancing algorithms, upgraded Linux kernel to 6.1, and better isolation of admin services.

Announcing HAProxy Enterprise 2.9

Introducing our next-generation HAProxy Enterprise WAF and HAProxy Enterprise Bot Management Module for unmatched security, performance, and reliability in a simple package.

HAProxy Fusion: New External Load Balancing & Multi-Cluster Routing Features

HAProxy Fusion Control Plane enables service discovery in any Kubernetes or Consul environment without complex workarounds. Harness powerful external load balancing, multi-cluster routing, and more.

HAProxy is Resilient to the HTTP/2 CONTINUATION Flood

Our implementation of the HTTP/2 protocol can effectively handle the CONTINUATION Flood.

Sharing HAProxy’s Kubernetes story at KubeCon Europe 2024

“HAProxy is an awesome load balancer,” was the common refrain on the expo floor at KubeCon Europe 2024, “but what does HAProxy do with Kubernetes?”

Announcing HAProxy Kubernetes Ingress Controller 1.11

HAProxy Kubernetes Ingress Controller 1.11 features enhanced security with rootless containers, improved CRD management, and QUIC protocol introduction.

Software load balancers vs appliances: better performance & consistency with HAProxy

Different load balancer form factors don't always perform nor repackage well. Learn how HAProxy's unique software-first approach addresses common pain points when choosing the right form factor.

Protect against NetScaler vulnerability CitrixBleed

In this post, we will show how you can use an HAProxy Enterprise load balancer to protect against CitrixBleed by placing it in front of your NetScaler instance(s).

December 2023 - CVE-2023-45539: HAProxy Accepts # as Part of the URI Component Fixed

We have received questions regarding CVE-2023-45539 issued in November 2023. The versions of our products released on Monday, 21 August 2023 to fix...

Web App Security vs. API Security: Unified Approaches Reign Supreme

While there are core differences between web apps and APIs, a unified security strategy is crucial. In this blog, we'll discuss why both types of security appear different yet are inherently linked.

Rate limiting based on AWS VPC ID

We show you how to implement rate limiting based on the ID of the Virtual Private Cloud in Amazon Web Services using HAProxy Enterprise.

Scalable Load Balancing & Security Made Simple at AWS re:Invent 2023

Watch our Lightning Talk at AWS re:Invent 2023 on how HAProxy Fusion and HAProxy Enterprise enable simple and scalable load balancing and security on AWS.

Announcing HAProxy 2.9

HAProxy 2.9 is faster, more flexible, and more observable than ever before. Ready to upgrade? Here’s how to get started.

Announcing HAProxy Fusion 1.2 LTS

HAProxy Fusion 1.2 brings new efficiencies, workflows, and form factors that enable you to be more productive, use more of your favorite tools, and explore powerful new use cases.

KubeCon NA 2023: Celebrating Innovation and the K8s Community

The sun has officially set on KubeCon North America 2023, but the CNCF's flagship event has left a lasting impression on us. Here's what we observed, what we talked about, and what resonated.

Why implementing app security can lead to spiraling costs

To avoid overspending, businesses should reevaluate their security vendors and prioritize a more cost-effective approach.

How to Extract Insightful Data From Proxy Protocol Packets

In this guide, we’ll explain why connection data matters. Next, we'll cover how the PROXY protocol works, how to use the TShark analyzer to capture and inspect packets and view the extraction results.

Why your load balancer should be fast & flexible

When it comes to key technology purchases, businesses should look for two attributes: cost efficiency and flexibility.

HAProxy's growth continues with rave reviews and powerful capabilities

The G2 Fall 2023 Reports are in! HAProxy's acclaim across multiple categories, market levels, and global segments has risen. Here's what users are saying about their HAProxy use cases.

HAProxy is not affected by the HTTP/2 Rapid Reset Attack (CVE-2023-44487)

CVE-2023-44487 found in the HTTP/2 protocol could allow a DoS attack against web servers, reverse proxies, or other software. HAProxy products are unaffected, but we're monitoring the situation.

Announcing HAProxy Enterprise 2.8 & HAProxy ALOHA 15.5

Users who upgrade to the latest versions will benefit from features that enhance the flexibility of our enterprise security options to meet even more use cases.

Your Comprehensive Guide to HAProxy Protocol Support

Modern load balancers need broad internet protocol support. We’ll outline HAProxy's product-specific protocol support, highlight core features, and share handy use cases.

August 2023 - CVE-2023-40225: Empty content-length header vulnerability fixed

HAProxy Technologies released new versions of its products to fix the vulnerability CVE-2023-40225. Learn more here.

Black Hat USA: adaptable security from HAProxy

HAProxy Technologies showcased its deep, targeted, and scalable security at Black Hat USA 2023.

How to Log HTTP Headers With HAProxy for Debugging Purposes

In this blog post, we show how to collect HTTP header logs and store them remotely to avoid overwhelming your standard log system.

G2’s Most Recommended WAF & DDoS Protection

The G2 Summer 2023 Grid Reports recognize HAProxy as a leader in the Web Application Firewall (WAF) and DDoS Protection categories.

What is the Kubernetes Gateway API?

The Kubernetes Gateway API is a specification or standard managed by the SIG-NETWORK community that models service networking in Kubernetes.

How to create powerful, customized Lua mailers in HAProxy

Deeper mailer customization has arrived in HAProxy 2.8! Learn how Lua-based mailers improve on their C-based predecessors and support powerful new monitoring capabilities.

Automate HAProxy Let's Encrypt certificates with acme.sh

Improvements in acme.sh integration allows you to manage TLS certificates with Let’s Encrypt without restarting HAProxy.

Announcing HAProxy Data Plane API 2.8

Following the recent HAProxy 2.8 release, we are proud to announce that we have released HAProxy Data Plane API 2.8, available on our GitHub page.

Your Starter Guide to Using the HAProxy Lua Event Framework

In this article, we’ll take you on a quick tour of the new Lua event framework shipped with HAProxy 2.8—plus demonstrate how Lua helps you further customize HAProxy’s behavior.

How to Enable QUIC Load Balancing on HAProxy

In this blog post, we outline the steps to get started and the reasons why users are choosing to serve applications using HTTP/3 over QUIC.

Announcing HAProxy 2.8

We're thrilled to announce the community-driven HAProxy 2.8 release! Join us on GitHub, Slack, Discourse, and the HAProxy mailing list.

HAProxy Fusion 1.1 Enables Application Delivery at Scale

Discover more about the new, more secure, and even easier to use version 1.1 of the HAProxy Fusion Control Plane in this blog post.

Introduction to Traffic Shaping Using HAProxy

In this blog post, we discuss what traffic shaping is and how you can implement it in HAProxy and HAProxy Enterprise using our bandwidth limitation filter.

Announcing HAProxy Data Plane API 2.7

HAProxy Technologies is proud to unveil the 2.7 release of HAProxy Data Plane API. With this release, we support all HAProxy configuration keywords in the Data Plane API.

Announcing HAProxy Kubernetes Ingress Controller 1.10

HAProxy Kubernetes Ingress Controller 1.10 is now available. HAProxy Enterprise Kubernetes Ingress Controller 1.10 is coming soon, and will incorporate these same features.In this release, we added pa

HAProxy Momentum: G2 Spring 2023 Edition

Spring marks a season of growth, and HAProxy was in full bloom in the Spring 2023 G2 reports. Our users continue to share their positive experiences .

Announcing HAProxy Enterprise 2.7 & HAProxy ALOHA 15

HAProxy Enterprise 2.7 and HAProxy ALOHA 15 are now available. If you want to start the upgrade procedure straight away, go to the upgrade instructions.

KCD France Roundup: HAProxy Evolving Alongside Kubernetes & Cloud-Native Community

KCD France 2023 was a pleasure for our team. It was great connecting with HAProxy users, especially from the Kubernetes and cloud-native community.

HAProxy Fusion has landed (simple, scalable, and secure)

HAProxy Fusion Control Plane gives the power to simplify, scale, and secure HAProxy application delivery infrastructure using a centralized control plane.

February 2023 – CVE-2023-25725: Header Parser Fixed

HAProxy Technologies has announced that HAProxy 2.0 or newer, HAProxy Enterprise 2.0 or newer, and HAProxy ALOHA 12.5 or newer are affected by CVE-2023-25725. If you are using an affected product you

HAProxy user reviews show community momentum

Taking the new G2 reports, user reviews, and real-world benchmark results, HAProxy stands as a market leader in application delivery and customer experience.

Announcing HAProxy 2.7 and HAProxy Enterprise 2.7r1

HAProxy 2.7 adds features such as Traffic Shaping, Stick Tables Sharding, Scalability Improvements, and Layer 7 HTTP Retry Updates.

Most Common Website Security Threats

This blog post will discuss web threats and how to protect yourself against DDoS attacks, web scraping, brute-force attacks, and vulnerability scanning.

HAProxyConf 2022 Recap

The HAProxyConf 2022 gave us three days of workshops, keynotes, technical talks, and use cases from HAProxy core developers, community, and enterprise users.

Secure cookies using HAProxy Enterprise

Cookies have many usages, most notably user authentication and settings. This post will explain the best practices for how to secure your cookies.

Upgrade OpenSSL 3.0 to Protect Against a Critical Vulnerability

If you are using OpenSSL version 3.0 or above with HAProxy, you should update to OpenSSL version 3.0.7.

Fundamentals: What Sets Containers Apart from Virtual Machines

In this blog post, you will read how containers have become one of the most efficient ways of virtually deploying applications.

Fundamentals: application acceleration & the benefits for your service delivery

In this blog post, you will learn that application acceleration is all about improving the responsiveness of a digital service.

Verify OAuth JWT Tokens With HAProxy

Learn how to secure your APIs against unauthorized access. The OAuth 2 protocol uses JSON Web Tokens to convey a client’s permissions and HAProxy can verify whether a token can be trusted.

Fundamentals: What is an API Gateway?

When talking about managing web applications and the services they provide, the term “API gateway” is often thrown around, but what does it mean?

Fundamentals: load balancing & the right distribution algorithm for you

In this blog, you will learn what algorithm is the best for you, both static and dynamic algorithms will help you manage incoming traffic for web applications.

Fundamentals: High Availability & the Role of a Reverse Proxy

In this blog post, we will explore the gold standard of high availability and the difference between a forward proxy and a reverse proxy.

Path-Based Routing With HAProxy

Here's how to deploy the HAProxy load balancer in front of your services and then use path-based routing to direct requests to the correct backend service.

Restrict API Access With Client Certificates (mTLS)

HAProxy enables mTLS, supporting client certificate authentication for both clients and backend servers. Learn how to set it up in this blog post.

Log Forwarding With HAProxy & Syslog

Learn how HAProxy can act as a log collection point that ingests logs from multiple applications and then forwards them to a centralized log aggregation server.

Preserve stick table data when reloading HAProxy

A reload clears away all of your stick table data.. The good news is that there is a way to preserve data during a reload, which we’ll cover in this blog post.

Announcing HAProxy Data Plane API 2.6

We updated the HAProxy Data Plane API to cover more HAProxy configuration keywords. In this blog, you’ll see everything we’ve added.

HAProxyConf 2022 call for papers now open

Do you want to talk for this year's HAProxyConf 2022? Submit your talk for this year's event which will be held on November 8 and 9 in Paris.

Custom Resources With HAProxy Kubernetes Ingress Controller

Learn how the HAProxy Kubernetes Ingress Controller provides a set of custom resources that includes Global, Defaults, and Backend.

Announcing HAProxy Kubernetes Ingress Controller 1.8

In 1.8 of the HAProxy Kubernetes Ingress Controller release, we added support for full rootless mode, Prometheus metrics for the controller itself, and...

Announcing HAProxy 2.6

As always, the community behind HAProxy made it possible to bring the enhancements in HAProxy 2.6 release. Read on for a list of changes in HAProxy 2.6.

What is the PROXY protocol? How it preserves client IPs

In this blog post, you’ll learn how the Proxy Protocol preserves a client’s IP address when that client’s connection passes through a proxy.

Two ways to enable sticky sessions in HAProxy (guide)

In this blog post, you will learn how HAProxy supports sticky sessions. You can choose to implement them either with a cookie or with the user’s IP address.

April/2022 – CVE-2022-22965: Spring4Shell Remote Code Execution Mitigation

Remote Code Execution vulnerability was discovered in the Java Spring Core library. This allows attackers to execute arbitrary code on affected systems.

Use Your Load Balancer to Monitor Application Health

In this blog post, you’ll learn about several metrics that stand out as particularly useful for monitoring the health of your applications when they’re load balanced by HAProxy.

Announcing HAProxy Data Plane API 2.5

We focused on covering more HAProxy keywords, making the API a full-fledged way to configure HAProxy. In that area, version 2.5 brings a lot of improvements.

How load balancing improves the performance of your applications

In this blog post, you'll learn how load balancing is an indispensable technique for improving a website’s performance.

Load Balance an Infinite Number of Servers & Never Reload HAProxy

Let’s consider one of HAProxy’s newest features, dynamic servers, which lets you add and remove servers from HAProxy’s load balancing list on-the-fly without ever reloading the process.

What is load balancing and how does It work?

Load balancing is the distribution of network traffic between backend servers to ensure high availability and performance. Here's everything you should know.

December/2021 – CVE-2021-44228: Log4Shell Remote Code Execution Mitigation

Vulnerability which is tracked in CVE-2021-44228, dubbed Log4Shell, allows attackers to execute arbitrary code on affected systems.

Announcing HAProxy 2.5

We are announcing HAProxy 2.5! In this blog post, you will find a full list of improvements included in this version.

Willy Tarreau on HAProxy at its 20 year anniversary (interview)

In this interview, Willy describes his views on the success of the project, and how it grew over the years.

Announcing HAProxy Data Plane API 2.4

Version 2.4 improves e2e tests, revamps how logging in the HAProxy Data Plane API works, adds support for namespace filtering in Consul Service Discovery, and much more.

Announcing HAProxy Kubernetes Ingress Controller 1.7

In the 1.7 version of the HAProxy Kubernetes Ingress Controller, we added support for custom resource definitions that cover most of the configuration settings.

A guide to HAProxy health checks for high availability

HAProxy provides three types of health checks: active health checks, passive health checks and agent health checks. In this blog, we will learn about each one.

Rate Limiting with the HAProxy Kubernetes Ingress Controller

Learned how to fine tune your HAProxy Kubernetes Ingress Controller’s configuration to leverage powerful annotations to protect your services and APIs.

September/2021–CVE-2021-40346: Duplicate ‘Content-Length’ Header Fixed

If you use HAProxy 2.0 or up, you must update to the latest version. A vulnerability was found that makes it possible for an attacker to...

How to check and test your HAProxy configuration safely

Learn how to safely test and validate your HAProxy config file with a single command.

The HAProxy APIs (What You Should Know)

In this blog post, you will learn more about HAProxy APIs and how you can manage your HAProxy configuration without editing its configuration file by hand.

How to install the latest HAProxy on Ubuntu

In this post, you will learn how to install the open-source edition of HAProxy on Ubuntu, one of the most popular and powerful operating systems around.

August/2021 – HAProxy 2.0+ HTTP/2 Vulnerabilities Fixed

If you are using HAProxy 2.0 or newer, it is important that you update to the latest version. A vulnerability was found, and here's what you should know.

How to run HAProxy with Docker

Learn how to run HAProxy in a Docker container with this step-by-step guide. Covers configuration, performance considerations, security, and provides ready-to-use commands.

AWS EC2 Service Discovery With HAProxy (Step by Step Guide)

In this blog post, you will learn how to enable service discovery for AWS EC2 instances using HAProxy and the HAProxy Data Plane API.

HAProxy load balancer configuration basics

Learn to configure a basic HAProxy load balancer from scratch. Our tutorial walks you through setting up frontends, backends, and simple routing rules.

Run the HAProxy Kubernetes Ingress Controller Outside of Your Kubernetes Cluster

In this blog post, you'll learn how to run our Kubernetes Ingress Controller externally to your Kubernetes cluster, which obviates the need for running another load balancer in front.

HAProxyConf 2021 Call for Papers

Do you have a topic you’d like to present? Submit your proposal! The call for papers is now open with the submission deadline set to July 5th, 2021.

Consul service discovery for HAProxy (integration guide)

In this blog, you will learn how to integrate HAProxy and Consul by using the HAProxy Data Plane API, which enables dynamic load balancer configuration changes.

Visualize HAProxy metrics with InfluxDB

In this blog post, we’ll walk through all of the steps necessary to get your HAProxy metrics displayed in InfluxDB.

Announcing HAProxy 2.4

HAProxy 2.4 adds features such as support for HTTP/2 WebSockets, authorization and routing of MQTT and FIX protocol messages, DNS resolution over TCP, and more.

Announcing HAProxy Data Plane API 2.3

HAProxy Data Plane API 2.3 expands its service discovery mechanisms and introduces native support for discovering AWS EC2 instances and auto-scaling groups.

Announcing HAProxy Kubernetes Ingress Controller 1.6

Version 1.6 of the HAProxy Kubernetes Ingress Controller gives you more access to the features present in the underlying HAProxy engine. You can now...

Autoscaling with the HAProxy Kubernetes Ingress Controller & KEDA

In this blog post, we will describe how to implement autoscaling of your application pods using KEDA and the HAProxy Kubernetes Ingress Controller.

Power Your Consul Service Mesh With HAProxy

Choosing HAProxy as the proxy technology in your Consul service mesh means you’re running a high-performance solution and reducing latency between services.

HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance

First ever software load balancer exceeds 2 million RPS on a single Arm instance! We're near an era where you get the world’s fastest load balancer for free.

HAProxy Enterprise 2.3 & HAProxy 2.4 support the Financial Information eXchange (FIX) protocol

Having FIX available in HAProxy is great news for financial organizations. Here are the benefits of using HAProxy to route traffic to your FIX application servers.

Using HAProxy as an API Gateway, Part 6 [Security]

In this blog post, we’ll see how placing your servers behind HAProxy and using it as an API gateway lets you narrow the point of entry for attackers.

Using HAProxy as an API Gateway, Part 5 [Monetization]

In this post, you will learn how to leverage tokens to grant some users more access than others and then charge for the service. It's called API monetization.

Logging With the HAProxy Kubernetes Ingress Controller

The HAProxy Kubernetes Ingress Controller has two sources of logs: the controller and the HAProxy load balancer. Both can be customized.

Using HAProxy as an API gateway, part 4 [metrics]

In this blog post, you'll learn about the metrics which HAProxy compiles, how to extract them with Prometheus, and visualize them with Grafana or Kibana.

How to Map Domain Names to Backend Server Pools With HAProxy

In this blog post, we will show several ways of handling multi-domain configurations, including an introduction to using HAProxy maps.

Protect servers with HAProxy connection limits & queues

In this blog post, we show how you can use HAProxy connection limits and queues to protect your servers when load balancing heavy amounts of traffic.

Announcing HAProxy Kubernetes Ingress Controller 1.5

The HAProxy Kubernetes Ingress Controller 1.5 release brings some exciting features that let you control the underlying configuration, and much more.

Announcing HAProxy Data Plane API 2.2

The HAProxy Data Plane API version 2.2 adds service discovery capabilities with a native Consul integration. It also introduces file handling and storage support for...

2 Ways to Implement a Circuit Breaker in HAProxy (Guide)

In this blog post, you'll learn how to implement a circuit breaker with HAProxy in a simple and more complex way, that allows greater customization.

Route SSH Connections With HAProxy

In this blog post, you will learn several ways to configure HAProxy for proxying SSH, all of which rely on the ssh command's ProxyCommand field.

HTTP keep-alive, pipelining, multiplexing & connection pooling

In this blog post, you will learn more about persistent TCP connections in an HTTP world and the various ways in which HAProxy supports it.

HAProxy log sampling & cost-saving benefits | 2 examples

Log Sampling is a powerful feature introduced in HAProxy 2.0 that lets you create a representative view of your data allowing you to minimize your costs.

Layer 4 vs Layer 7 Proxy Mode (Understanding the Difference)

With HAProxy you can switch between proxying traffic at layer 4 (TCP) or layer 7 (HTTP). This blog post describes the features available to you in each mode.

vSphere 7 With Tanzu Integrates With HAProxy for Load Balancing Enterprise-Grade Kubernetes

Learn more about why VMware chose to partner with HAProxy Technologies and use the HAProxy as the default load balancer for its Tanzu Kubernetes clusters.

Announcing HAProxy 2.3

HAProxy 2.3 adds exciting features such as forwarding, prioritizing, and translating messages sent over the Syslog Protocol on both UDP and TCP, and much more.

Accelerate Your APIs by Using the HAProxy Cache

Learn how to set up HAProxy's cache feature, which will improve how fast you can deliver messages and lessen the load placed upon your backend servers.

HAProxy & HTTP Strict Transport Security (HSTS)

HTTP Strict Transport Security (HSTS) sends a user to the secure version of a site without an HTTP redirect. Learn how to enable HSTS with HAProxy.

Redirect HTTP to HTTPS in a Few Easy Steps With HAProxy

Read on to learn how to use the HAProxy load balancer to redirect users from HTTP to HTTPS automatically in a few easy steps.

Serve dynamic custom error pages with HAProxy

This blog post covers how to set up custom error pages in HAProxy in order to ensure consistent, branded messaging that supports any backend web stack.

CVE-2020-15598: HAProxy Enterprise Unaffected Due to ModSecurity Hardening Measures

Customers using HAProxy Enterprise are completely unaffected by CVE-2020-15598 because the load balancer touts a customized and hardened version of ModSecurity.

Is That Bot Really Googlebot? Detecting Fake Crawlers With HAProxy Enterprise

Find out how you can detect and stop fake web crawlers by using Verify Crawler add-on which comes included with the HAProxy Enterprise license.

Become FIPS Compliant With HAProxy Enterprise on Red Hat Enterprise Linux 8

In the blog post, you will learn how to become FIPS compliant using Red Hat Enterprise Linux 8 and HAProxy Enterprise for TLS encryption.

HAProxy Enterprise Offers SAML-based Single Sign-On

HAProxy Enterprise handles SAML single sign-on for your applications and integrates with identity providers like Azure Active Directory.

Dynamic SSL certificate storage in HAProxy

Learn how to use the dynamic SSL certificate storage introduced in HAProxy 2.1 and expanded in HAProxy 2.2 in order to update SSL certificates dynamically.

Use HAProxy response policies to stop threats

In this blog post, you will learn how to use HAProxy's Deny, Tarpit, Silent Drop, Reject, and Shadowban response policies to stop threats and malicious users.

Enable TLS with Let’s Encrypt and HAProxy Kubernetes Ingress Controller

Learn how to configure TLS with the HAProxy Kubernetes Ingress Controller to provide secure communication to everyone accessing your Kubernetes services.

Announcing HAProxy Data Plane API 2.1

Version 2.1 of the HAProxy Data Plane API expands support to all available request and response actions, adds Lua actions, and improves file handling.

Get to know the HAProxy process manager

In this blog post, you will find out more about the HAProxy Process Manager, which allows you to start external programs that are hosted under HAProxy.

Announcing HAProxy 2.2

HAProxy 2.2 adds exciting features such as a fully dynamic SSL certificate storage, a native response generator, security hardening, and much more.

Announcing HAProxy Data Plane API 2.0

Version 2.0 of the HAProxy Data Plane API brings exciting enhancements that unlock the power of HAProxy’s flexible configuration and its runtime capabilities.

HAProxy Enterprise Ingress Controller Coming Soon to the Red Hat Marketplace

HAProxy Enterprise will be offered in the Red Hat Marketplace, allowing OpenShift users to take advantage of its advanced features for Ingress.

HAProxy 1.8+ HTTP/2 HPACK decoder vulnerability fixed

Security researcher Felix Wilhelm has disclosed a critical vulnerability in HAProxy's HTTP/2 HPACK decoder in versions 1.8 and above which is now fixed.

Use Helm to Install the HAProxy Kubernetes Ingress Controller

In this blog post, we show step-by-step, how to install the HAProxy Kubernetes Ingress Controller into your Kubernetes cluster using the popular Helm charts

Multi-Tenant Kubernetes Clusters With the HAProxy Kubernetes Ingress Controller

Learn to use the HAProxy Kubernetes Ingress Controller to host multiple tenants in a cluster and configure namespaces, access controls, and resource quotas.

Load Balancing PHP-FPM With HAProxy & FastCGI

This blog post covers how you can use HAProxy and the FastCGI protocol to ensure fast, secure, and observable load balancing of your PHP-FPM applications.

We’re building a rich ecosystem of certified HAProxy integrations

HAProxy Technologies is rolling out the Certified Integrations Partner Program to ensure its customers have access to integrations certified to work well.

Rolling Updates & Blue-Green Deployments With Kubernetes & HAProxy

Learn how the HAProxy Kubernetes Ingress Controller supports rolling updates and blue-green deployments for updating your Kubernetes applications.

HAProxyConf 2019 Recap

Look back at some of the highlights from the sold-out HAProxyConf 2019, the inaugural conference for the HAProxy community.

Building blocks of a modern proxy (9 key features)

In this blog post, you'll see examples of recent trends in the modern proxy industry and learn how HAProxy is being shaped to accommodate these changes.

HAProxy 2.1: Supercharged Performance & Streamlined Codebase

HAProxy 2.1 brings visible performance gains in key areas and new features including Dynamic SSL Certificate Updates, FastCGI and a streamlined codebase.

The History of HAProxy

HAProxy's origin story is one that has not been told and you may be curious about its roots and what drove it to be what it is today.

HAProxy on Docker Swarm: load balancing & DNS service discovery

In this blog post, you’ll see how to combine HAProxy and Docker Swarm to load balance traffic across your service replicas.

PacketShield: A Tool for Superior DDoS Protection

Learn more about the HAProxy ALOHA PacketShield product, which provides stateful packet filtering and protects your network against DDoS.

Introducing HAProxyConf 2019

Announcing our first-ever HAProxy user conference, HAProxyConf 2019! We’re excited about the speakers we have lined up, as well as bringing people together.

How to Enable CORS (Cross-Origin Resource Sharing) in HAProxy?

Learn more about the HAProxy Cross-Origin Resource Sharing (CORS) Lua module, which streamlines adding CORS to your APIs.

HAProxy rate limiting: four examples

Use rate limiting in HAProxy to stop clients from making too many requests and promote fair usage of your services.

HAProxy Traffic Mirroring for Real-World Testing

Learn how to use the HAProxy Traffic Shadowing agent to enable traffic mirroring and stream production requests to a test environment.

HAProxy Layer 7 Retries & Chaos Engineering

HAProxy 2.0 introduced layer 7 retries, which provides resilience against unreachable nodes, network latency, slow servers, and HTTP errors.

Dissecting the HAProxy Kubernetes Ingress Controller

Learn how the new HAProxy Kubernetes Ingress Controller provides a high-performance ingress for your Kubernetes-hosted applications.

The New HAProxy Data Plane API: Two Examples of Programmatic Configuration

This blog post shows you how to use the HAProxy Data Plane API to manage your load balancer configuration dynamically using HTTP commands.

HAProxy 2.0 & beyond

HAProxy Technologies is excited to announce the release of HAProxy 2.0, bringing features critical for cloud-native and containerized environments.

HAProxy SSL termination (offloading) in 5 simple steps

This blog post shows how to quickly and easily enable SSL/TLS encryption for your applications by using high-performance SSL termination in HAProxy.

DNS for Service Discovery in HAProxy

Learn how to use DNS service discovery in HAProxy to detect server changes and automatically apply them to your configuration.

Tracing requests through HAProxy with AWS X-Ray

HAProxy integrates with AWS X-Ray to give you the best observability across your Amazon Web Services (AWS) resources, including your load balancer.

5 Ways to Extend HAProxy With Lua

This blog post demonstrates how you can use custom Lua code to extend HAProxy for creating your own fetches, converters, actions, services, and tasks.

HAProxy Stats page: a complete guide to all metrics

Learn to monitor, troubleshoot, and manage your load balancer effectively with our deep dive into the HAProxy status page.

HAProxy on AWS: Best Practices Part 3

In this blog post, learn to use HAProxy, Keepalived, Terraform, and Ansible to set up highly-available load balancing in AWS.

HAProxy Exposes a Prometheus Metrics Endpoint

In this blog, we’ll explain how to set up the metrics endpoint, how to configure Prometheus to scrape it and offer guidance on graphing and alerting the data.

Extend HAProxy with Stream Processing Offload Engine (SPOE)

Learn how to use The HAProxy Stream Processing Offload Engine (SPOE) filter to extend HAProxy in any language without modifying its core codebase.

IP masking in HAProxy

This blog post shows how to use HAProxy IP Masking in order to protect the privacy of your users, helping you to stay compliant with laws like the GDPR.

Using HAProxy as an API gateway, part 3 [health checks]

In the blog post, you'll learn various ways to health check your servers so that your APIs maintain a high level of reliability. This includes...

Test driving “power of two random choices” load balancing

The Power of Two Random Choices load-balancing algorithm made us curious. See how it stacks up against other modern-day algorithms available in HAProxy.

Introduction to HAProxy logging

Master HAProxy logging with our step-by-step guide. Learn to configure logging, understand TCP & HTTP log formats, and parse log files for critical infrastructure insights.

Using HAProxy as an API Gateway, Part 2 [Authentication]

In the blog post, you'll learn more about using HAProxy as an API gateway, leveraging it to secure your API endpoints using OAuth 2.

HAProxy 1.9.2 adds gRPC support

Learn how to set up an example project that uses gRPC and Protocol Buffers to stream messages between a client and a server with HAProxy in between.

HAProxy 1.9 Has Arrived

Announcing the release of HAProxy 1.9, which brings end-to-end HTTP/2, buffer and connection management improvements, native HTTP representation, and more.

Building a Service Mesh With HAProxy & Consul

In a service mesh, requests are passed to proxies that relay messages from one service to another. See how HAProxy can be used in the Consul service mesh.

Bot protection with HAProxy

HAProxy has best-in-class bot protection capabilities for detecting and defending against many types of unwanted bot traffic. Read on to learn how.

Application Layer DDoS Attack Protection With HAProxy

HAProxy's high-performance security capabilities are utilized as a key line of defense by many of the world's top enterprises. Application layer DDoS attacks are aimed at overwhelming an application w

HAProxy configuration file: global, defaults, front and backend

This guide explains the 4 core sections and key directives such as setting the haproxy default timeout, timeout client, and timeout server.

Introduction to HAProxy Maps

In this post, you’ll learn how to create an HAProxy map file, store it on your system, reference it in your HAProxy configuration, and update it in real time.

HAProxy on AWS: best practices part 2

In this blog post, we'll demonstrate how to place HAProxy at the edge of your AWS infrastructure without involving Elastic Load Balancing (ELB).

Using HAProxy as an API gateway, part 1 [introduction]

An API gateway routes client requests intelligently and handles functions such as load balancing, security, and rate limiting.

Introduction to HAProxy stick tables

Learn more about HAProxy's fast, in-memory storage called stick tables that let you track user activities, including malicious ones, across requests.

HAProxy ACLs: a complete guide with examples

A practical guide to HAProxy ACLs. Learn the syntax and follow step-by-step examples to block traffic, redirect users, choose backends, and enhance security.

Hitless Reloads With HAProxy (How-To Configuration Guide)

HAProxy offers a patch set for enabling seamless reloads of HAProxy without dropping packets in the process. In this blog post, we show you how to enable this.

Let’s Encrypt (ACMEv2) for HAProxy

HAProxy Technologies is proud to announce the availability of an integrated Let’s Encrypt ACMEv2 Lua client for HAProxy and HAProxy Enterprise (HAPEE).

Announcing HAProxy Enterprise 1.8r1

We are very excited to announce the release of HAProxy Enterprise 1.8r1, which is built on top of the monumental stable release of HAProxy 1.8.

HAProxy & Consul With DNS for Service Discovery

In this blog post, we will show you a zero-touch method for integrating HAProxy with Consul by using DNS for service discovery available in HAProxy 1.8.

HAProxy on AWS: Best Practices Part 1

In this blog post, we'll demonstrate how to use HAProxy in combination with Amazon Elastic Load Balancing (ELB) and Amazon Application Load Balancer (ALB).

Multithreading in HAProxy

This blog post will provide an introduction to multithreading functionality in HAProxy, its configuration, and basic troubleshooting procedures.

HAProxy Enterprise Edition now on AWS marketplace

LLC. is pleased to announce that HAProxy Enterprise Edition, the commercial version of its popular load balancer, is now available on AWS Marketplace.

Dynamic configuration with the HAProxy Runtime API

In this blog post, we'll take you on a tour of the HAProxy Runtime API and its capability to dynamically configure ACLs, stick tables and TLS ticket keys.

TLS 1.3 & 0-RTT in HAProxy

Transport Layer Security (TLS) is a cryptographic protocol that enables secure communications over a computer network.

Announcing HAProxy 1.8

The monumental stable release of HAProxy 1.8 is here! The HAProxy 1.8 release candidate 1 (RC1) has been published by the R&D team here at HAProxy Technologies.

Dynamic Scaling for Microservices With the HAProxy Runtime API

Microservices architectures require the ability to make frequent app delivery changes in an automated and reliable way. The HAProxy Runtime API enables this.

Truly Seamless Reloads With HAProxy – No More Hacks!

What users often call a “seamless” or “hitless” reload is a configuration update or a service upgrade performed with no impact on user experience.

Using HAProxy With the Proxy Protocol to Better Secure Your Database

Why use the Proxy protocol? Well, when you lose client information like IP address when relaying connections through proxies, this tends to prevent you from...

HAProxy Technologies offers free hardware load balancers to students and interns

We're willing to offer a couple of load balancers for free to any student or intern who can describe a project they're working on that involves load balancing.

ALOHA Pocket is Coming…

This is the ALOHA Pocket. Probably the smallest load balancer you have ever seen from any vendor.

HAProxy and ELK (Elasticsearch, Logstash and Kibana) Stack

This blog contains information and provides a technical guide for getting started with the ELK stack, configuring HAProxy, parsing the data and troubleshooting.

What is a Slow POST Attack & How to Prevent One? (Guide)

In a Slow POST attack, an attacker begins by sending a legitimate HTTP POST header to a Web server, exactly as they would under normal circumstances.

HAProxy & Container IP Changes in Docker

In this blog post, we will answer this question: how to follow up on a container IP change when restarting a container?

Announcing HAProxy 1.6

13th of October 2015, Willy Terrau announced the release of HAProxy 1.6.0, after 16 months of development. A total of 1156 commits from 59 people were committed.

Serving ECC & RSA Certificates on Same IP With HAProxy

In this blog post, we will give a quick step-by-step guide on how to serve ECC and RSA certificates on the same IP with HAProxy.

HAProxy’s Load Balancing Algorithm for Static Content Delivery With Varnish

In this blog post, we will show how to use HAProxy's hash based load balancing algorithm for static content delivery with Varnish.

Microsoft Remote Desktop Services (RDS) Load Balancing

Remote Desktop Services is a technology from Microsoft that allows users to remotely access a session-based desktop, virtual machine-based desktop, or...

A HTTP Monitor Which Matches Multiple Conditions in HAProxy

Health checking is one of the most important features of a load balancer. Here we show how to match multiple conditions for HTTP health checking in HAProxy.

HAProxy and SSLv3 POODLE vulnerability

This blog post explains how to use HAProxy to simply prevent using SSLv3 or to prevent those users to reach your applications and print them a message.

Mitigating the Shellshock Vulnerability With HAProxy

Today’s article will explain how to use HAProxy to protect your application from Bash shellshock vulnerability if you’re in a case where you have to be protected.

PHP-FPM/FastCGI probe example (binary health check with HAProxy 1.5)

In this blog post, we demonstrate how to enable binary health checks with HAProxy 1.5 by using a PHP-fpm/FastCGI probe example.

What is the HTTP 408 Request Timeout error? (+ how to fix it)

The HTTP 408 status code is an error returned by the server when it doesn't receive a timely request from the client.

How to write Apache ProxyPass* rules in HAProxy?

Some customers ask us to migrate the Apache mod_proxy configuration into HAProxy. This article explains how to translate ProxyPass-related rules.

Linux Asymmetric Routing Using Multiple Default Gateways

In this blog post, we will demonstrate how to perform asymmetric routing and multiple default gateways on Linux with HAProxy.

How to Protect Application Cookies While Offloading SSL

You don’t want your clients to send their cookies (understand their identity) clearly through the Internet. This is today’s article's purpose.

Emulating Active/Passive Application Clustering With HAProxy

In this blog post, we will show the different ways in which you can use the HAProxy load balancer to emulate an active/passive clustering mode.

HAProxy Advanced Redis Health Check

In this blog post, we demonstrate how to build a simple Redis infrastructure thanks to the HAProxy advanced send/expect health checks feature.

Failover & Worst Case Management With HAProxy

HAProxy allows to redirect traffic based on events and internal status. In this blog post we show how to use HAProxy for failover and worst-case management.

Configuring HAProxy & Nginx for SPDY

Basically, HAProxy uses the NPN (and later the ALPN) TLS extension to figure out whether the client can browse the website using SPDY.

Transparent proxying & binding with HAProxy & ALOHA load balancer

Here comes the transparent proxy mode: HAProxy can be configured to spoof the client IP address when establishing the TCP connection to the server.

SSL client certificate information in HTTP headers & logs

In this blog post, we show how you can enable inserting client certificate information in HTTP headers and reporting them in the log line with HAProxy.

Apache Linux/Cdorked.A backdoor detection

In this blog post, we provide an HAProxy configuration that can help you detect the Apache Cdorked Backdoor attack in your systems and protect them against it.

Brute Force Attacks in WordPress (HAProxy Prevention Guide)

A brute force attack in WordPress consists of massively sending requests to a URL with different parameters each time. Here's how to prevent it using HAProxy...

Client IP Persistence or Source IP Hash Load Balancing

In this blog post, we show two ways of performing source IP affinity with HAProxy: through the hash load balancing algorithm and using HAProxy Stick Tables.

Configure Syslog-ng to Log Readable HTTP URL From HAProxy

In this blog post, we describe how you configure HAProxy to log URLs exactly the way they were sent by the client by using syslog-ng's flexible configuration.

IIS 6.0 appsession cookie and PCI compliance

When setup by the application server, the HAProxy load balancer can be used to update cookies on-the-fly. In this blog post, we explain how.

SSL Offloading Impact on Web Applications

Performing SSL at the Load-Balancer Layer is called SSL offloading because you offload this process from your application servers. Here's what you should know.

Mitigating the SSL BEAST attack using the ALOHA load balancer

The BEAST attack on SSL isn’t new, but we have not yet published an article to explain how to mitigate it with ALOHA or HAProxy.

Microsoft Exchange 2013 Load Balancing With HAProxy

In this blog post, we show how to perform load balancing with HAProxy on Microsoft Exchange 2013 Services hosted on single and multiple host names.

HAProxy, High MySQL Request Rate and TCP Source Port Exhaustion

In this blog post, we show how to use HAProxy with MySQL at high request rates, and how to prevent the common TCP source port exhaustion error.

Exchange Outlook Web Access (OWA) Cross Site Request Forgery (CSRF) protection

In this blog post, we will provide information on how to enable Exchange Outlook Web Access (OWA) Cross-Site Request Forgery (CSRF) protection with HAProxy.

HAProxy and WebSockets: a guide with configuration examples

HTTP protocol is connection-less and only the client can request information from a server. In any case, a server can contact a client. Furthermore...

Customizing HAProxy log formats (with examples)

This guide shows you how to use the 'log-format' directive, variables, and captured headers to create the perfect log for your needs.

HAProxy and Gzip Compression

Compression is used for reducing object size in order to reduce delivery delay for objects over the HTTP protocol. We show how to enable this in HAProxy.

High Performance WAF Platform With Naxsi and HAProxy

In this blog post, we will demonstrate how to create a highly performant WAF platform using Naxsi and the HAProxy load balancer.

Scalable WAF Protection With HAProxy & Apache With ModSecurity

The below information is deprecated as HAProxy Enterprise now offers a fully functional native WAF module which supports whitelist-based rulesets, and more.

SSL client certificate management at application level

The main purpose of using client-side certificates is to increase the level of authentication. Since HAProxy is often in front of web platform, it is the right place to do this authentication.

Highly available RTMP platform with HAProxy & crtmpserver

In this blog, we share how to build a high-available RTMP platform for delivering video content with HAProxy and crtmpserver.

eCommerce Application Delivery Controller (Configuration Guide)

In this blog post, we will show how to use HAProxy's layer 7 features to improve eCommerce website performance and provide the best end-user experience.

How to Get SSL With HAProxy Getting Rid of Stunnel, Stud, NGINX or Pound

HAProxy is a high-performance reverse proxy and load balancer commonly used on web platforms and even as a replacement for hardware load balancers like F5 appliances.

How to: SSL Native in HAProxy

HAProxy can support SSL offloading. Today, I’ll focus on how to install and configure HAProxy to offload SSL processing from your servers.

How to Use HAProxy & Varnish Together on a Single Domain Name

In this blog post, we'll explain how to use both HAProxy and Varnish on a web application hosted on a single domain name.

HAProxy vs Varnish (Complete Comparison)

Despite being “competitors”, each of them has its own very well performing: HAProxy is a Reverse-proxy Load-Balancer and Varnish is a Reverse-proxy cache.

HTTP request flood mitigation

In this blog post, we will provide a configuration that you can use to protect your applications against HTTP request flood attacks.

Use the GeoIP Database With HAProxy (Easy to Follow Guide)

Geolocation is the process of linking a third party to a geographical location. In easier words: know the country of a client's IP address. On the Internet, such a base is called GeoIP.

Efficient SMTP Relay Infrastructure With Postfix & Load Balancers

In this blog post, we will explain how to configure the HAProxy load balancer to build an efficient SMTP relay infrastructure with Postfix.

Preserve Source IP Address Despite Reverse Proxies (Guide)