Knowledge Base
Willkommen zur HAProxys ausführlicher und ständig wachsender Knowledge Base. Unser Content wird von einen Expertenteam, das auch aus Mitgliedier des HAProxy Core Development Teams besteht, geschrieben und erstellt. Die Knowledge Base beinhaltet eine große Auswahl verschiedener Topics, die Ihnen dabei helfen die maximale Leistungsfähigkeit von HAProxy zu erreichen.
December/2021 – CVE-2021-44228: Log4Shell Remote Code Execution Mitigation
This post will be updated over the next several days. Recently, a Remote Code Execution vulnerability was discovered in the Apache Log4J library. This vulnerability, which is tracked in CVE-2021-44228, dubbed Log4Shell, allows attackers to execute arbitrary code on...
Rate Limiting with the HAProxy Kubernetes Ingress Controller
Add IP-by-IP rate limiting to the HAProxy Kubernetes Ingress Controller. DDoS (distributed denial of service) events occur when an attacker or group of attackers flood your application or API with disruptive traffic, hoping to exhaust its resources and prevent...
September/2021 – CVE-2021-40346: Duplicate ‚Content-Length‘ Header Fixed
If you are using HAProxy 2.0 or newer, it is important that you update to the latest version. A vulnerability was found that makes it possible for an attacker to bypass the check for a duplicate HTTP Content-Length header, permitting a request smuggling attack or a...
August/2021 – HAProxy 2.0+ HTTP/2 Vulnerabilities Fixed
A vulnerability was found that makes it possible to abuse the HTTP/2 parser, allowing an attacker to prepend hostnames to a request, append top-level domains to an existing domain, and inject invalid characters through the :method pseudo-header.
Load Balancing/Routing
[Live Webinar] HAProxy Skills Lab: Health Checking Servers
Webinar date and time:Tuesday, February 15th, 2022US: 12 noon EST, 11 am CDT, 10am MDT, 9am PSTEU: 6pm CET, 7pm EETWorldwide: 5pm UTC A common misconception is that load balancing is enough to achieve high availability. That is only true when you factor in one, very...
What Is Load Balancing
Load balancing means splitting up network traffic so that you can distribute it evenly across a group of backend servers. For example, if you run two web servers, both hosting a copy of the same website, then you can balance the traffic across them, sending half to...
Announcing HAProxy 2.5
Register for our live webinar to learn more about this release. HAProxy 2.5 is now available! It adds improvements to a number of areas including better usability around setting variables, more descriptive error reporting and logging, and enhanced HTTP and WebSocket...
HAProxy 2.5 Funktionsübersicht
Datum und Uhrzeit des Webinars: Dienstag, 14. Dezember 2021 US: 12pm EST, 11am CST, 10am MST, 9am PST EU: 18 Uhr MEZ, 19 Uhr EET Global: 17 Uhr UTC HAProxy 2.5 ist jetzt verfügbar! In dieser Sitzung erfahren Sie mehr über die Änderungen. Diese Version von HAProxy...
SSL
Announcing HAProxy Data Plane API 2.2
The HAProxy Data Plane API 2.2 lays the foundation for first-class service discovery and introduces native support for Consul. It also adds storage and file handling for SSL certificates, Map files, and SPOE configuration files. Watch our on-demand webinar "What’s New...
Route SSH Connections with HAProxy
Route SSH connections through HAProxy using the SSH ProxyCommand feature and SNI. Watch our on-demand webinar in French "How to Route SSH Connections with HAProxy". Did you know that you can proxy SSH connections through HAProxy and route based on hostname? The...
Redirect HTTP to HTTPS with HAProxy
Use the HAProxy load balancer to redirect users from HTTP to HTTPS automatically. For decades, our lives have become increasingly dependent on sending and receiving data from across the Internet. Now, with more people working, studying, and hanging with friends...
[Live Webinar] Achieving FIPS 140-2 Encryption Compliance with HAProxy Enterprise on Red Hat Enterprise Linux
The live webinar will be held on Tuesday, November 10th, 2020 at following times: EU times: 5 PM GMT, 6 PM CET US times: 12 noon EST, 11 AM CDT, 10 AM MDT, 9 AM PDT Encryption is an important facet of cybersecurity. It involves scrambling messages so that they can not...
Microservices
Consul Service Discovery for HAProxy
HAProxy with the HAProxy Data Plane API can integrate with Consul to enable service discovery for your load balancer configuration. Many Ops team professionals rank HAProxy as their favorite load balancer because it adds high availability, security and...
Power Your Consul Service Mesh with HAProxy
Many of you use HashiCorp Consul for service discovery. It makes connecting one backend application or service to another easy: Your Consul servers store a catalog of addresses to all of your services; when an application within the network wants to discover where a...
Circuit Breaking in HAProxy
With HAProxy, you can implement a circuit breaker to protect services from widespread failure. Martin Fowler, who is famous for being one of the Gang of Four authors who wrote Design Patterns: Elements of Reusable Object-Oriented Software, hosts a website where...
Accelerate Your APIs by Using the HAProxy Cache
HAProxy's cache helps boost API performance by serving saved messages to your users. The age of rendering most of a web page's contents on the server and then delivering it as a colossal HTML file is fading into the past. Modern web frameworks like Angular, React, and...
Leistung
Autoscaling with the HAProxy Kubernetes Ingress Controller and KEDA
This blog post describes how to implement autoscaling of your application pods using KEDA and the HAProxy Kubernetes Ingress Controller. Since it was published, a new feature has been added to the ingress controller that lets you autoscale the number of ingress...
Protect Servers with HAProxy Connection Limits and Queues
HAProxy connection limits and queues can help protect your servers and boost throughput when load balancing heavy amounts of traffic. When you use HAProxy as an API gateway in front of your services, it has the ability to protect those servers from traffic...
Announcing HAProxy Kubernetes Ingress Controller 1.5
We've released version 1.5 of the HAProxy Kubernetes Ingress Controller. This version unlocks access to the raw HAProxy configuration language for power users to gain more control. You can also enable mutual TLS authentication between the ingress controller and...
HTTP Keep-Alive, Pipelining, Multiplexing and Connection Pooling
Persistent connections allow HAProxy to optimize resource usage, lower latency on both the client and server side, and support connection pooling. HTTP is a layer 7 protocol that's transmitted over a TCP connection. It works in a client-server model and follows...
Webinare
[Live Webinar] HAProxy Skills Lab: Health Checking Servers
Webinar date and time:Tuesday, February 15th, 2022US: 12 noon EST, 11 am CDT, 10am MDT, 9am PSTEU: 6pm CET, 7pm EETWorldwide: 5pm UTC A common misconception is that load balancing is enough to achieve high availability. That is only true when you factor in one, very...
HAProxy 2.5 Funktionsübersicht
Datum und Uhrzeit des Webinars: Dienstag, 14. Dezember 2021 US: 12pm EST, 11am CST, 10am MST, 9am PST EU: 18 Uhr MEZ, 19 Uhr EET Global: 17 Uhr UTC HAProxy 2.5 ist jetzt verfügbar! In dieser Sitzung erfahren Sie mehr über die Änderungen. Diese Version von HAProxy...
[On-Demand Webinar] Run the HAProxy Kubernetes Ingress Controller in External Mode
If you prefer to watch the French version of this webinar, register here. Traditionally, connecting clients to services in Kubernetes has required multiple layers of proxies. For example, an external load balancer will route traffic to your nodes. Then, kube-proxy...
[On-Demand Webinar] What’s New in the HAProxy Data Plane API 2.3
The HAProxy Data Plane API enables remote, dynamic configuration of your HAProxy load balancers. Version 2.3 of the API adds: service discovery for AWS EC2 instances and Auto Scaling groups, the ability to view, add, and remove HAProxy ACLs, support for forwarding API...
Grundlagen
[Live Webinar] HAProxy Skills Lab: Health Checking Servers
Webinar date and time:Tuesday, February 15th, 2022US: 12 noon EST, 11 am CDT, 10am MDT, 9am PSTEU: 6pm CET, 7pm EETWorldwide: 5pm UTC A common misconception is that load balancing is enough to achieve high availability. That is only true when you factor in one, very...
What Is Load Balancing
Load balancing means splitting up network traffic so that you can distribute it evenly across a group of backend servers. For example, if you run two web servers, both hosting a copy of the same website, then you can balance the traffic across them, sending half to...
How to Enable Health Checks in HAProxy
HAProxy provides active, passive, and agent health checks. HAProxy makes your web applications highly available by spreading requests across a pool of backend servers. If one or even several servers fail, clients can still use your app as long as there are...
Testing Your HAProxy Configuration
Learn how to test your HAProxy Configuration. Properly testing your HAProxy configuration file is a simple, yet crucial part of administering your load balancer. Remembering to run one simple command after making a change to your configuration file can save you from...
Benchmarking
HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance
For the first time, a software load balancer exceeds 2-million RPS on a single Arm instance. A few weeks ago, while I was working on an HAProxy issue related to thread locking contention, I found myself running some tests on a server with an 8-core, 16-thread...
Test Driving „Power of Two Random Choices“ Load Balancing
The Power of Two Random Choices load-balancing algorithm has piqued some curiosity. In this blog post, we see how it stacks up against other modern-day algorithms available in HAProxy. Recently, I was asked twice about my opinion on supporting an algorithm known as...
Hypervisors Virtual Network Performance Comparison from a Virtualized Load Balancer Point of View
Introduction At HAProxy Technologies, we edit and sell a Load-Balancer appliance called ALOHA (stands for Application Layer Optimisation and High-Availability). A few month ago, we managed to make it run on the most common hypervisors available: VMWare (ESX, vsphere)...
Benchmarking SSL Performance
Introduction The story Recently, there has been some attacks against website which aimed to steal user identity. In order to protect their users, major website owners had to find a solution. Unfortunately, we know that sometimes, improving security means downgrading...
Random Tipps
Serve Dynamic Custom Error Pages with HAProxy
Set up custom error pages in HAProxy to ensure consistent, branded messaging that supports any backend web stack. The memory is probably still fresh: You're shopping online at your favorite website, looking for something specific, you've got it narrowed down to two or...
[Conference Presentation] Dynamic Application Routing Over SSL with HAProxy Enterprise
Back in May, HAProxy Senior Systems Engineer Chad Lavoie presented at the OpenStack Summit Boston. Chad presented on using maps in HAProxy to dynamically route requests while securing your site with SSL combined with the use of the Update Module (included in HAProxy...
HAProxy and HTTP Errors 408 in Chrome
Lately, there was some discussions on HAProxy's mailing list about 408 errors printed in Chrome browsers. Origin of 408 errors 408 is the status code used by web servers or proxies when the client has not sent a whole HTTP request during a certain period of time. It...
Configure syslog-ng to Log Readable HTTP URL from HAProxy
These tips are provided by Exosec. Exosec provides a very good monitoring product called POM, based on Nagios with very strong value added such as very simple administration, application monitoring, etc... For some of their project, they use either HAProxy or the...
Observability
Visualize HAProxy Metrics with InfluxDB
HAProxy generates over a hundred metrics to give you a nearly real-time view of the state of your load balancers and the services they proxy, but to get the most from this data, you need a way to visualize it. InfluxData’s InfluxDB suite of applications takes...
Logging with the HAProxy Kubernetes Ingress Controller
The HAProxy Kubernetes Ingress Controller publishes two sets of logs: the ingress controller logs and the HAProxy access logs. After you install the HAProxy Kubernetes Ingress Controller, logging jumps to mind as one of the first features to configure. Logs...
Using HAProxy as an API Gateway, Part 4 [Metrics]
HAProxy publishes more than 100 metrics about the traffic flowing through it. When you use HAProxy as an API gateway, these give you insight into how clients are accessing your APIs. Several metrics come to mind as particularly useful, since they can help you...
HAProxy Log Sampling
Log Sampling is a powerful feature introduced in HAProxy 2.0 that lets you define a percentage of your logs to create a representative view of your data allowing you to minimize your costs. Log files are the key to observability. They can provide helpful information...
DevOps
Announcing HAProxy Data Plane API 2.4
Version 2.4 improves its e2e tests, revamps how logging in the HAProxy Data Plane API works, adds support for namespace filtering in Consul Service Discovery, improves runtime capabilities for maps and ACLs, adds server-template support and adds log_targets to global...
The HAProxy APIs
The HAProxy load balancer provides a set of APIs for configuring it programmatically. Although many people enjoy the simplicity of configuring their HAProxy load balancer by directly editing its configuration file, /etc/haproxy/haproxy.cfg, others want a way to...
[On-Demand Webinar] HAProxy Skills Lab: Diagnosing Simple Problems
If you prefer joining the same webinar in French, register here. Troubleshooting network issues can seem like an arcane art. Operations teams build up knowledge through trial-and-error, online forums, and wisdom handed down from one generation to another. However, the...
[On-Demand Webinar] Lernen Sie alles über die HAProxy Data Plane API 2.0
HAProxy ist allgemein bekannt für seine flexible Konfiguration und Runtime-Möglichkeiten. HAProxy ist nicht nur ein leistungsstarker Software Load Balancer, sondern auch die beste Wahl für dynamische Umgebungen, wo Änderungen konstant sind. Mit dem Release von der...
Kubernetes
Announcing HAProxy Kubernetes Ingress Controller 1.7
We’re proud to announce the release of version 1.7 of the HAProxy Kubernetes Ingress Controller! In this release, we added support for custom resource definitions that cover most of the configuration settings. Definitions are available for the global, defaults and...
HAProxy Kubernetes Ingress Controller Reaches 10 Million Community Downloads
It's almost wild how two years have passed already since we first announced the HAProxy Ingress Controller for Kubernetes. Note that this project is different from the jcmoraisjr/haproxy-ingress HAProxy ingress controller project on GitHub. Our project is also an...
Rate Limiting with the HAProxy Kubernetes Ingress Controller
Add IP-by-IP rate limiting to the HAProxy Kubernetes Ingress Controller. DDoS (distributed denial of service) events occur when an attacker or group of attackers flood your application or API with disruptive traffic, hoping to exhaust its resources and prevent...
[On-Demand Webinar] Run the HAProxy Kubernetes Ingress Controller in External Mode
If you prefer to watch the French version of this webinar, register here. Traditionally, connecting clients to services in Kubernetes has required multiple layers of proxies. For example, an external load balancer will route traffic to your nodes. Then, kube-proxy...
Service Discovery
[On-Demand Webinar] What’s New in the HAProxy Data Plane API 2.3
The HAProxy Data Plane API enables remote, dynamic configuration of your HAProxy load balancers. Version 2.3 of the API adds: service discovery for AWS EC2 instances and Auto Scaling groups, the ability to view, add, and remove HAProxy ACLs, support for forwarding API...
Consul Service Discovery for HAProxy
HAProxy with the HAProxy Data Plane API can integrate with Consul to enable service discovery for your load balancer configuration. Many Ops team professionals rank HAProxy as their favorite load balancer because it adds high availability, security and...
Announcing HAProxy Data Plane API 2.3
The HAProxy Data Plane API 2.3 expands its service discovery mechanisms and introduces native support for discovering AWS EC2 instances and auto-scaling groups. It also adds a new configuration file that supports HCL and YAML, an Inotify configuration watcher, and...
Power Your Consul Service Mesh with HAProxy
Many of you use HashiCorp Consul for service discovery. It makes connecting one backend application or service to another easy: Your Consul servers store a catalog of addresses to all of your services; when an application within the network wants to discover where a...
Cloud
Keine Ergebnisse gefunden
Die angefragte Seite konnte nicht gefunden werden. Verfeinern Sie Ihre Suche oder verwenden Sie die Navigation oben, um den Beitrag zu finden.
LUA
Enabling CORS in HAProxy
The HAProxy Cross-Origin Resource Sharing (CORS) Lua module streamlines adding CORS to your APIs. What is CORS? Read on to learn more.It doesn't matter whether you're using Angular, React, Vue or simple, vanilla JavaScript. You're guaranteed to need to fetch or...
5 Ways to Extend HAProxy with Lua
Use Lua to add fetches, converters, actions, services and tasks to HAProxy. Did you know that HAProxy embeds the Lua scripting language, which you can use to add new functionality? HAProxy features an extremely powerful and flexible configuration language and gives...
Let’s Encrypt (ACMEv2) for HAProxy
HAProxy Technologies is proud to announce the availability of an integrated Let’s Encrypt ACMEv2 Lua client for HAProxy and HAProxy Enterprise Edition (HAPEE). HAPEE comes bundled with Lua support in a precompiled binary conveniently distributed using your Linux...
HAProxy 1.6-Dev1 and LUA
HAProxy 1.6-dev1 Yesterday, Willy has released HAProxy 1.6-dev1: ANNOUNCE HAProxy 1.6-dev1. This version contains many new features and core improvements. Amongst the new features, one is LUA, contributed by Thierry (HAProxy Technologies developer). NOTE: We invite...
Brauchen Sie mehr Unterstützung?
Wenden Sie sich an unsere HAProxy Experten, die Ihnen helfen können die bestmögliche Lösung hinsichtlich Bereitstellung, Skalierung und Sicherheit zu finden.
