December/2021 – CVE-2021-44228: Log4Shell Remote Code Execution Mitigation
Vulnerability which is tracked in CVE-2021-44228, dubbed Log4Shell, allows attackers to execute arbitrary code on affected systems.
Articles in category
Tech
Willy Tarreau on HAProxy at Its 20 Year Anniversary (Interview)
In this interview, Willy describes his views on the success of the project, and how it grew over the years.
Announcing HAProxy Data Plane API 2.4
Version 2.4 improves e2e tests, revamps how logging in the HAProxy Data Plane API works, adds support for namespace filtering in Consul Service Discovery, and much more.
Rate Limiting with the HAProxy Kubernetes Ingress Controller
Learned how to fine tune your HAProxy Kubernetes Ingress Controller’s configuration to leverage powerful annotations to protect your services and APIs.
September/2021–CVE-2021-40346: Duplicate ‘Content-Length’ Header Fixed
If you use HAProxy 2.0 or up, you must update to the latest version. A vulnerability was found that makes it possible for an attacker to...
The HAProxy APIs (What You Should Know)
In this blog post, you will learn more about HAProxy APIs and how you can manage your HAProxy configuration without editing its configuration file by hand.
August/2021 – HAProxy 2.0+ HTTP/2 Vulnerabilities Fixed
If you are using HAProxy 2.0 or newer, it is important that you update to the latest version. A vulnerability was found, and here's what you should know.
How to Run HAProxy With Docker (In-Depth Guide)
In this blog post, you’ll learn why you might consider running HAProxy inside a Docker container and what the ramifications could be.
HAProxyConf 2021 Call for Papers
Do you have a topic you’d like to present? Submit your proposal! The call for papers is now open with the submission deadline set to July 5th, 2021.
Layer 4 vs Layer 7 Proxy Mode (Understanding the Difference)
With HAProxy you can switch between proxying traffic at layer 4 (TCP) or layer 7 (HTTP). This blog post describes the features available to you in each mode.
Is That Bot Really Googlebot? Detecting Fake Crawlers With HAProxy Enterprise
Find out how you can detect and stop fake web crawlers by using Verify Crawler add-on which comes included with the HAProxy Enterprise license.
HAProxy 1.8+ HTTP/2 HPACK Decoder Vulnerability Fixed
Security researcher Felix Wilhelm has disclosed a critical vulnerability in HAProxy's HTTP/2 HPACK decoder in versions 1.8 and above which is now fixed.