CVE-2020-15598: HAProxy Enterprise Unaffected Due to ModSecurity Hardening Measures!
The OWASP ModSecurity Core Rule Set team has reported a Denial of Service vulnerability in ModSecurity version 3.x that allows an attacker to send a crafted payload that exploits a flaw in how regular expressions are matched within the software. A CVE (CVE-2020-15598)...
Is That Bot Really Googlebot? Detecting Fake Crawlers with HAProxy Enterprise
Detect and stop fake web crawlers using HAProxy Enterprise's Verify Crawler add-on. How your website ranks on Google can have a substantial impact on the number of visitors you receive, which can ultimately make or break the success of your online business. To...
![[Live Webinar] Kubernetes Ingress: Routing and Load-Balancing HTTP(s) traffic](https://cdn.haproxy.com/wp-content/uploads/2020/09/HAProxy-Kubernetes-Ingress-Basics-webinar-1.png)
[Live Webinar] Kubernetes Ingress: Routing and Load-Balancing HTTP(s) traffic
The live webinar will be held on Wednesday, October 7th 2020, at following times:US TIMES: 12 noon EST, 11 AM CDT, 10 AM MDT, 9 AM PDTEU TIMES: 5 PM GMT, 6 PM CET Kubernetes converts a collection of servers into an interconnected cluster over which you can host any of...
Become FIPS Compliant with HAProxy Enterprise on Red Hat Enterprise Linux 8
Guarantee strong encryption by enabling 'FIPS mode' with RHEL and HAProxy Enterprise. SSL and its successor TLS are protocols that safeguard web traffic as it crosses the Internet, encrypting communication and protecting it from tampering. However, the...
HAProxy Enterprise Offers SAML-based Single Sign-on
HAProxy Enterprise handles SAML single sign-on for your applications and integrates with identity providers like Azure Active Directory. Single sign-on (SSO) is such a familiar convenience for companies that it's easy to forget how powerful it is. When employees...
Dynamic SSL Certificate Storage in HAProxy
Use the HAProxy Runtime API to update SSL certificates in HAProxy without a reload. When you route traffic through an HAProxy load balancer, you gain the ability to terminate SSL at the load balancer. HAProxy encrypts communication between the client and itself and...
Use HAProxy Response Policies to Stop Threats
HAProxy gives you an arsenal of sophisticated countermeasures including deny, tarpit, silent drop, reject, and shadowban to stop malicious users. There are two phases to stopping malicious users from abusing your website and online applications. Step one is detection,...
Enable TLS with Let’s Encrypt and the HAProxy Kubernetes Ingress Controller
The HAProxy Kubernetes Ingress Controller integrates with cert-manager to provide Let's Encrypt TLS certificates. When it comes to TLS in Kubernetes, the first thing to appreciate when you use the HAProxy Ingress Controller is that all traffic for all services...
![[On-Demand Webinar] Ask Me Anything About HAProxy 2.2](https://cdn.haproxy.com/wp-content/uploads/2020/08/Webinar-AMA-HAProxy-2_2-1-1000x500.png)
[On-Demand Webinar] Ask Me Anything About HAProxy 2.2
If you missed the webinar about HAProxy 2.2, you can watch it on-demand. HAProxy 2.2 adds many exciting features, including: fully dynamic SSL certificate storage; a native response generator; advanced ring buffer logging with Syslog over TCP; security hardening;...
Announcing HAProxy Data Plane API 2.1
Version 2.1 of the HAProxy Data Plane API expands support to all available request and response actions, adds Lua actions, and improves file handling. A year ago, we introduced version 1.0 of the HAProxy Data Plane API, enabling you to configure your HAProxy load...
Get to Know the HAProxy Process Manager
The HAProxy Process Manager allows you to start external programs that are managed under HAProxy. Not everything is compiled directly into HAProxy's C code. Some components are written using other programming languages and run alongside the load balancer. These...
Events
![[Virtual Conference] KubeCon + CloudNativeCon Europe 2020](https://cdn.haproxy.com/wp-content/uploads/2020/07/KubeCon-EU-HAProxy.png)
[Virtual Conference] KubeCon + CloudNativeCon Europe 2020
This year's edition of KubeCon + CloudNativeCon is a virtual experience that will feature more than 300 sessions within 16 different tracks over the course of four days: August 17 – 20. 2020. We are thrilled to be a gold sponsor. If interested in learning more about...
