Stay in control through change and attack: what's new in HAProxy Enterprise 3.4
Traffic changes constantly, and so does the traffic trying to break in. Backends churn as tenants come and go. Someone is always probing the edge.
HAProxy Enterprise 3.4 gives you more control over how the data plane behaves under constant change and attack. It builds on the flexibility, performance, security, and resilience HAProxy Enterprise is already known for, and extends each one where production deployments feel the pressure. Everything stays in line, on your infrastructure, inside the perimeter. No traffic leaves for a third-party scrubbing network, no external CAPTCHA provider sits in the request path, and one configuration language and API set drives every capability.
In this 40-minute session, you'll see:
Programmable UDP: Per-datagram rules filter, route, track, and rate-limit traffic, and protocol-aware health checks catch a service hanging while the host stays up.
Backends published at runtime: Runtime API creates, updates, and deletes whole backends with no reload, driven from your existing IaC tooling.
Certificates refreshed from a remote store: The crt-store rotates certificate and JWE key material on the issuer's schedule, not yours.
WAF inspection limits: Cap how many resources one request can consume globally, per profile, or on a single rule, without changing a single verdict.
Two self-hosted CAPTCHA options: Altcha and Cap run the challenge and verification inside your perimeter, with outcomes in the access log.
Broader GSLB records: HAProxy Enterprise supports TXT, CAA, NAPTR, RDATA, and PTR, plus a cold-check mode, so DNS load balancing stays in one stack.
This session is for platform engineers and security teams running HAProxy Enterprise or evaluating it for a regulated environment. You'll leave knowing what 3.4 puts under your control, and with a clear answer to the question that decides your tuning strategy: when to set a WAF limit globally, when to set it per profile, and how to tune inspection without changing a single verdict.
Speakers
