Load balance Layer 4 (networking) or Layer 7 (application layer) traffic — with support for reverse proxy, transparent proxy, direct server return, NAT, IPIP, and VIP-less modes.

Designate HAProxy Enterprise as an authoritative DNS server across global regions and assign client requests to local datacenters. Enable failover protection and round-robin traffic distribution. Simple config management for multiple zones, regions, and data centers, and secure HTTPS health checking.

Keep your applications and APIs online via advanced health checks, backup server support, traffic overload protection, support for VRRP floating virtual IPs, and route health injection.

Load balance HTTP, HTTP/2, HTTP/3, HTTP/3 over QUIC, UDP, gRPC, FastCGI, Financial Information eXchange (FIX), and MQTT traffic — and more.

Compress HTTP responses before passing them to clients. Reduce payload sizes, bandwidth usage, and server CPU load.

Release unused connections early, dynamically control server-side connections for improved resource usage, and filter malformed TCP connections or HTTP requests.

Accelerate TCP and HTTP performance by intelligently managing data flows between devices, while giving the recipient more time to process data without becoming overwhelmed.

Alter any specific HTTP header within each request or response to use caching more effectively, reduce data payloads, and employ mechanisms such as Keep-Alive.

Powered by our Intelligent WAF Engine and threat intelligence data from HAProxy Edge, our next-gen WAF delivers a balanced accuracy of 98.48% with ultra-low latency and zero-day threat protection. Customize protection for different apps and locations with WAF Profiles.

Stop DDoS attacks, fraud, scraping, brute force attacks, and more — not legitimate bots or tools. The Threat Detection Engine (TDE) detects, classifies, and labels complex threats with exceptional accuracy. Adapts dynamically to your traffic profile, and keeps your data private with 100% local processing.

End-to-end TLS encryption for all communication ensures the highest levels of data security and privacy. TLS termination speeds up decryption at the load balancer while minimizing added latency. The AWS-LC library provides the best available performance at any scale.

Our patented DDoS protection filters incoming packets at a wire-speed line rate, and blocks unwanted traffic in real-time with zero false positives. Deploy as a router or load balancer.

Whether you're a small business or large enterprise, HAProxy ALOHA load-balancing models are tuned for your unique needs. Choose between two rack-mounted 1U devices and operational modes for optimal performance.

HAProxy ALOHA offers multiple licensing options with unique performance and capacity specs — and gives your organization room to grow if infrastructure needs change. Change your setup later without expensive device upgrades.

Equip your hardware load balancers with SFP+ and QSFP+ optical transceivers to interconnect them with your core network. Choose the network the bandwidth you need (1, 10, or 40 Gbps) by aggregating links and establishing combinations of network interfaces.

Our patented DDoS protection filters incoming packets at a line rate up to 10 Gbps (at wire speed), and blocks unwanted traffic in real-time with zero false positives. Deploy as a router or load balancer.

Deployable as a virtual image, HAProxy ALOHA Virtual Load Balancer ships with support for VMWare, Microsoft Hyper-V, and KVM (Kernel-based Virtual Machine) hypervisors.

Harness an embedded GUI to manage configuration, monitor real-time performance, security, health, connection details, and more. Use the Network Management API to control your multi-tenant architecture.

Aggregate and create VLAN in a snap, while fully controlling how the network is presented to the underlying VM. Establish and simulate complex networking environments without paying for expensive, supplemental equipment.

Test how your networking setup reacts to changing traffic conditions, failover events, and dynamic packet flows. Manage multiple GSLB-enabled DNS zones, while running the client and DNS servers all on your PC.

Take advantage of support for SNMP, NTP, Syslog, and VRRP to keep your load-balancing setup synchronized, manageable, and reliable.

Manage configuration, provisioning, monitoring, and diagnostics via web-based interface or the Network Administration API. Connect directly via serial port or remotely via SSH.

Deploy your applications in minutes without having to write complex configuration sections from scratch. Quickly configure network interfaces, link aggregation, VLAN membership, IP-related parameters, and more.

Identify and isolate traffic by assigning unique VLANs to groups of devices and their ethernet frames. Clearly track your network packets and control traffic flows, while boosting performance and security.