Knowledge Base
Welcome to HAProxy’s extensive and ever-expanding knowledge base. Created by a team of experts including HAProxy’s Core Development Team; it covers a wide range of topics to help you achieve maximum potential.
Enable TLS with Let’s Encrypt and the HAProxy Kubernetes Ingress Controller
The HAProxy Kubernetes Ingress Controller integrates with cert-manager to provide Let's Encrypt TLS certificates. When it comes to TLS in Kubernetes, the first thing to appreciate when you use the HAProxy Ingress Controller is that all traffic for all services...
PacketShield: A Tool for Superior DDoS Protection
PacketShield provides stateful packet filtering and protects your network against DDoS. Packet floods are DDoS attacks in which large numbers of packets are sent to a target with the goal of saturating the target's resources. They can heavily impact the system's...
Enabling CORS in HAProxy
The HAProxy Cross-Origin Resource Sharing (CORS) Lua module streamlines adding CORS to your APIs. What is CORS? Read on to learn more. It doesn't matter whether you're using Angular, React, Vue or simple, vanilla JavaScript. You're guaranteed to need to fetch or...
HAProxy Rate Limiting: Four Examples
Use rate limiting in HAProxy to stop clients from making too many requests and promote fair usage of your services. Rate limiting in HAProxy stops a client from making too many requests during a window of time. You might have a policy that stipulates how many requests...
Load Balancing/Routing
Announcing HAProxy Data Plane API 2.1
Version 2.1 of the HAProxy Data Plane API expands support to all available request and response actions, adds Lua actions, and improves file handling. A year ago, we introduced version 1.0 of the HAProxy Data Plane API, enabling you to configure your HAProxy load...
Get to Know the HAProxy Process Manager
The HAProxy Process Manager allows you to start external programs that are managed under HAProxy. Not everything is compiled directly into HAProxy's C code. Some components are written using other programming languages and run alongside the load balancer. These...
HAProxy Go Packages Ecosystem
Under the hood, the HAProxy Data Plane API and the HAProxy Kubernetes Ingress Controller are powered by a shared set of Go libraries that apply changes to an HAProxy configuration file. In this talk, Marko Juraga describes how these libraries are developed and invites...
[On-Demand Webinar] Learn the HAProxy Data Plane API 2.0
People know HAProxy as the high-performance software load balancer that they can configure once, then trust to do the job, but it's also the best choice for dynamic environments where change is constant. For instance, HAProxy's configuration can be generated on the...
SSL
HAProxy SSL Termination
The HAProxy load balancer provides high-performance SSL termination, allowing you to encrypt and decrypt traffic. You can quickly and easily enable SSL/TLS encryption for your applications by using HAProxy SSL termination. HAProxy is compiled with OpenSSL, which...
Let’s Encrypt (ACMEv2) for HAProxy
HAProxy Technologies is proud to announce the availability of an integrated Let’s Encrypt ACMEv2 Lua client for HAProxy and HAProxy Enterprise (HAPEE). HAProxy Enterprise comes bundled with Lua support in a precompiled binary conveniently distributed using your Linux...
TLS 1.3 and 0-RTT in HAProxy
Transport Layer Security (TLS) is a cryptographic protocol that enables secure communications over a computer network. It has been in widespread use on the Internet for various services, such as e-commerce, web browsing, and instant messaging. TLS has also been made...
SSL Client Certificate Information in HTTP Headers and Logs
HAProxy and SSL HAProxy has many nice features when speaking about SSL, despite SSL has been introduced in it lately. One of those features is the client side certificate management, which has already been discussed on the blog. One thing was missing in the article,...
Microservices
Dissecting the HAProxy Kubernetes Ingress Controller
The new HAProxy Kubernetes Ingress Controller provides a high-performance ingress for your Kubernetes-hosted applications. Register for the on demand webinar "The HAProxy Kubernetes Ingress Controller for High-Performance Ingress". Containers allow cross-functional...
[On-Demand Webinar] HAProxy Data Plane API: True Dynamic Configuration Management
Integrating HAProxy into automation tools, continuous-delivery pipelines, and service meshes just got a lot easier. We’ve introduced a new REST API that you can use to configure HAProxy fully at runtime and it’s called the Data Plane API. Tune into this webinar to...
DNS for Service Discovery in HAProxy
HAProxy 1.8 and newer allows you to use DNS service discovery to detect server changes and automatically apply them to your configuration. HAProxy is a mature, high-performance software component that’s been reliably serving the load balancing and ADC markets for over...
Using HAProxy as an API Gateway, Part 3 [Health Checks]
Achieving high availability rests on having good health checks. HAProxy as an API gateway gives you several ways to do this. Run your service on multiple servers. Place your servers behind an HAProxy load balancer. Enable health checking to quickly remove unresponsive...
Performance
Test Driving “Power of Two Random Choices” Load Balancing
The Power of Two Random Choices load-balancing algorithm has piqued some curiosity. In this blog post, we see how it stacks up against other modern-day algorithms available in HAProxy. Recently, I was asked twice about my opinion on supporting an algorithm known as...
HAProxy 1.9.2 Adds gRPC Support
HAProxy provides end-to-end proxying of HTTP/2 traffic. Use HAProxy to route, secure, and observe gRPC traffic over HTTP/2. Read on to learn more. HAProxy 1.9 introduced the Native HTTP Representation (HTX). Not only does this allow you to use HTTP/2 end-to-end, it...
Multithreading in HAProxy
There are two possible ways to have HAProxy run on multiple CPU cores: By using the multiprocess model, where HAProxy automatically starts a number of separate system processes (method available since HAProxy version 1.1.7) By using the multithreading model, where...
Webinars
[Live Webinar] Ask Me Anything About HAProxy 2.2
The live webinar will be held on Thursday, August 13th, 2020 at following times: US TIMES: 12 noon EST, 11 AM CDT, 10 AM MDT, 9 AM PDT EU TIMES: 5 PM GMT, 6 PM CET Please send us your questions in advance to team@haproxy.com or drop us a DM on Twitter. If you missed...
[On-Demand Webinar] A Tour of HAProxy 2.2
HAProxy 2.2 adds exciting features such as a fully dynamic SSL certificate storage, a native response generator, advanced ring buffer logging with Syslog over TCP, security hardening, and improved observability and debugging capabilities. It also touts more...
[On-Demand Webinar] Learn the HAProxy Data Plane API 2.0
People know HAProxy as the high-performance software load balancer that they can configure once, then trust to do the job, but it's also the best choice for dynamic environments where change is constant. For instance, HAProxy's configuration can be generated on the...
[On-Demand Webinar] HAProxy Skills Lab: Building a Multi-tenant Kubernetes Cluster
In Kubernetes, you can run workloads from different teams alongside one another, but without overlap. You can also target different stages of the delivery pipeline (Dev, QA) within the same cluster. This ability to segregate tenants is due to the Kubernetes namespace...
Basics
Get to Know the HAProxy Process Manager
The HAProxy Process Manager allows you to start external programs that are managed under HAProxy. Not everything is compiled directly into HAProxy's C code. Some components are written using other programming languages and run alongside the load balancer. These...
Use Helm to Install the HAProxy Kubernetes Ingress Controller
You can use Helm to install the HAProxy Kubernetes Ingress Controller into your Kubernetes cluster, making it easier to start routing traffic using the powerful HAProxy load balancer. Learn more by registering for our webinar: "HAProxy Skills Lab: Introduction to...
HAProxy Rate Limiting: Four Examples
Use rate limiting in HAProxy to stop clients from making too many requests and promote fair usage of your services. Rate limiting in HAProxy stops a client from making too many requests during a window of time. You might have a policy that stipulates how many requests...
HAProxy SSL Termination
The HAProxy load balancer provides high-performance SSL termination, allowing you to encrypt and decrypt traffic. You can quickly and easily enable SSL/TLS encryption for your applications by using HAProxy SSL termination. HAProxy is compiled with OpenSSL, which...
Benchmarking
Test Driving “Power of Two Random Choices” Load Balancing
The Power of Two Random Choices load-balancing algorithm has piqued some curiosity. In this blog post, we see how it stacks up against other modern-day algorithms available in HAProxy. Recently, I was asked twice about my opinion on supporting an algorithm known as...
Hypervisors Virtual Network Performance Comparison from a Virtualized Load Balancer Point of View
Introduction At HAProxy Technologies, we edit and sell a Load-Balancer appliance called ALOHA (stands for Application Layer Optimisation and High-Availability). A few month ago, we managed to make it run on the most common hypervisors available: VMWare (ESX, vsphere)...
Benchmarking SSL Performance
Introduction The story Recently, there has been some attacks against website which aimed to steal user identity. In order to protect their users, major website owners had to find a solution. Unfortunately, we know that sometimes, improving security means downgrading...
Random Tips
[Conference Presentation] Dynamic Application Routing Over SSL with HAProxy Enterprise
Back in May, HAProxy Senior Systems Engineer Chad Lavoie presented at the OpenStack Summit Boston. Chad presented on using maps in HAProxy to dynamically route requests while securing your site with SSL combined with the use of the Update Module (included in HAProxy...
HAProxy and HTTP Errors 408 in Chrome
Lately, there was some discussions on HAProxy's mailing list about 408 errors printed in Chrome browsers. Origin of 408 errors 408 is the status code used by web servers or proxies when the client has not sent a whole HTTP request during a certain period of time. It...
Configure syslog-ng to Log Readable HTTP URL from HAProxy
This tips is provided by Exosec. Exosec provides a very good monitoring product called POM, based on Nagios with very strong value added such as very simple administration, application monitoring, etc... For some of their project, they use either HAProxy or the ALOHA...
HAProxy and gzip Compression
Synopsis Compression is a Technic to reduce object size to reduce delivery delay for objects over HTTP protocol. Until now, HAProxy did not include such feature. But the guys at HAProxy Technologies worked hard on it (mainly David Du Colombier and @wlallemand)....
Observability
Tracing Requests Through HAProxy with AWS X-Ray
HAProxy integrates with AWS X-Ray to give you the best observability across your Amazon Web Services (AWS) resources, including your load balancer. Read on to learn how. There is a trend to move away from monolithic applications towards microservices. Microservices...
HAProxy Exposes a Prometheus Metrics Endpoint
HAProxy has added native support for Prometheus, allowing you to export metrics directly. Read on to learn more. Metrics are a key aspect of observability, along with logging and tracing. They contain the data that inform you about the state of your systems,...
Binary Health Check with HAProxy 1.5: PHP-fpm/fastcgi Probe Example
Application layer health checking Health checking is the ability to probe a server to ensure the service is up and running. This is one of the root feature of any load-balancer. One can probe servers and services at different layer of the OSI model: * ARP check (not...
HAProxy Advanced Redis Health Check
Introduction Redis is an opensource nosql database working on a key/value model. One interesting feature in Redis is that it is able to write data to disk as well as a master can synchronize many slaves. HAProxy can load-balance Redis servers with no issues at all....
DevOps
[On-Demand Webinar] Learn the HAProxy Data Plane API 2.0
People know HAProxy as the high-performance software load balancer that they can configure once, then trust to do the job, but it's also the best choice for dynamic environments where change is constant. For instance, HAProxy's configuration can be generated on the...
Announcing HAProxy Data Plane API 2.0
Find out more by registering for our webinar: “Learn the HAProxy Data Plane API 2.0“ Version 2.0 of the HAProxy Data Plane API brings some exciting enhancements that unlock the power of HAProxy's flexible configuration and its runtime capabilities. The HAProxy Data...
Programmatic HAProxy Configuration Using the Data Plane API
In his HAProxyConf 2019 presentation, Chad Lavoie (Director of Support, HAProxy Technologies) describes how to get started and how to build tools that integrate with the API. He demonstrates how to configure a frontend and backend in HAProxy, and then how to modify a...
[On-Demand Webinar] HAProxy Skills Lab: Building a Multi-tenant Kubernetes Cluster
In Kubernetes, you can run workloads from different teams alongside one another, but without overlap. You can also target different stages of the delivery pipeline (Dev, QA) within the same cluster. This ability to segregate tenants is due to the Kubernetes namespace...
Kubernetes
Enable TLS with Let’s Encrypt and the HAProxy Kubernetes Ingress Controller
The HAProxy Kubernetes Ingress Controller integrates with cert-manager to provide Let's Encrypt TLS certificates. When it comes to TLS in Kubernetes, the first thing to appreciate when you use the HAProxy Ingress Controller is that all traffic for all services...
HAProxy Enterprise Ingress Controller Coming Soon to the Red Hat Marketplace
The HAProxy Enterprise Ingress Controller will be offered in the Red Hat Marketplace, allowing OpenShift users to seamlessly upgrade to an enterprise-class version of the default OpenShift Ingress, gaining immediate access to a robust and reliable code base with...
[On-Demand Webinar] HAProxy Skills Lab: Building a Multi-tenant Kubernetes Cluster
In Kubernetes, you can run workloads from different teams alongside one another, but without overlap. You can also target different stages of the delivery pipeline (Dev, QA) within the same cluster. This ability to segregate tenants is due to the Kubernetes namespace...
Use Helm to Install the HAProxy Kubernetes Ingress Controller
You can use Helm to install the HAProxy Kubernetes Ingress Controller into your Kubernetes cluster, making it easier to start routing traffic using the powerful HAProxy load balancer. Learn more by registering for our webinar: "HAProxy Skills Lab: Introduction to...
Service Discovery
HAProxy on Docker Swarm: Load Balancing and DNS Service Discovery
Use HAProxy to add routing, load balancing, and DNS service discovery to Docker Swarm. Docker Swarm lets you expand beyond hosting Docker containers on a single machine. It oversees a cluster of servers and manages which to deploy a container to, depending on each...
DNS for Service Discovery in HAProxy
HAProxy 1.8 and newer allows you to use DNS service discovery to detect server changes and automatically apply them to your configuration. HAProxy is a mature, high-performance software component that’s been reliably serving the load balancing and ADC markets for over...
HAProxy and Consul with DNS for Service Discovery
In this blog post we will show you a zero-touch method for integrating HAProxy with Consul by using DNS for service discovery available in HAProxy 1.8. HAProxy is the most widely used software load balancer in the world, well known for being extremely fast and...
Cloud
Building Blocks of a Modern Proxy
A major outcome of IT/Ops evolution is realizing the importance of a reverse proxy, such as HAProxy, in achieving modern application delivery. This is the first post in a series about HAProxy's role in building a modern systems architecture that relies on cloud-native...
[On-Demand Webinar] HAProxy Data Plane API: True Dynamic Configuration Management
Integrating HAProxy into automation tools, continuous-delivery pipelines, and service meshes just got a lot easier. We’ve introduced a new REST API that you can use to configure HAProxy fully at runtime and it’s called the Data Plane API. Tune into this webinar to...
Tracing Requests Through HAProxy with AWS X-Ray
HAProxy integrates with AWS X-Ray to give you the best observability across your Amazon Web Services (AWS) resources, including your load balancer. Read on to learn how. There is a trend to move away from monolithic applications towards microservices. Microservices...
HAProxy on AWS: Best Practices Part 3
In this blog post, learn to use HAProxy, Keepalived, Terraform and Ansible to set up highly-available load balancing in AWS. In the third part of this series, we are again tackling how to implement a highly available architecture in AWS. In the first article, HAProxy...
LUA
Enabling CORS in HAProxy
The HAProxy Cross-Origin Resource Sharing (CORS) Lua module streamlines adding CORS to your APIs. What is CORS? Read on to learn more. It doesn't matter whether you're using Angular, React, Vue or simple, vanilla JavaScript. You're guaranteed to need to fetch or...
5 Ways to Extend HAProxy with Lua
Use Lua to add fetches, converters, actions, services and tasks to HAProxy. Did you know that HAProxy embeds the Lua scripting language, which you can use to add new functionality? HAProxy features an extremely powerful and flexible configuration language and gives...
Let’s Encrypt (ACMEv2) for HAProxy
HAProxy Technologies is proud to announce the availability of an integrated Let’s Encrypt ACMEv2 Lua client for HAProxy and HAProxy Enterprise (HAPEE). HAProxy Enterprise comes bundled with Lua support in a precompiled binary conveniently distributed using your Linux...
HAProxy 1.6-Dev1 and LUA
HAProxy 1.6-dev1 Yesterday, Willy has released HAProxy 1.6-dev1: ANNOUNCE HAProxy 1.6-dev1. This version contains many new features and core improvements. Amongst the new features, one is LUA, contributed by Thierry (HAProxy Technologies developer). NOTE: We invite...
Need More Assistance?
Contact the authoritative experts on HAProxy who will assist you in finding the solution that best fits your needs for deployment, scale, and security.