HAProxy ALOHA
Hardware Load Balancer

PacketShield

ALOHA is bundled with PacketShield, our patented anti-DDoS solution that filters packets at a line rate up to 10 Gbps and outperforms other firewall software, including Netfilter / iptables. Even during heavy load, it adds almost no latency. It uses both stateless and stateful packet filtering to protect the load balancer and the servers behind it.

PacketShield protects your network from TCP floods, including ACK, RST and SYN floods, and also DNS reflection attacks, using ultra-fast inspection and generating responses at the driver level. By maintaining its own session table, it learns which packets are legitimate and can then deflect attacks before they reach your server’s network stack, with zero false-positives.

It provides real-time metrics, giving you insight into the volume of traffic filtered, which can be fed into the monitoring software you choose. This can easily be added onto your hardware HAProxy ALOHA and and is enabled with the ALOHA UI.

HAProxy ALOHA ModSecurity WAF

HAProxy ALOHA provides the ModSecurity Web Application Firewall (WAF) for detecting and stopping malicious web traffic before it can reach your servers. Use it to block SQL injection (SQLi) attacks, cross-site scripting (XSS), remote code execution, and other common threats. ALOHA’s ModSecurity has been hardened to avoid failures that other versions may be vulnerable to, and it demonstrates a performance gain over implementations found in other load balancers. Define custom routing rules to control how much traffic the WAF inspects for even greater performance and get easy observability straight from the ALOHA Logs dashboard.