HAProxy Enterprise

Comprehensive Load Balancing Methods

Load balance by round robin, least connections, URI, IP address and several hashing methods.

Advanced Routing Decisions

Send requests to specific application clusters based on URL, domain name, file extension, client IP address, health state of backends, number of active connections, SSL client certificate, and more.

Stickiness/Persistence

Maintain users' sessions based on TCP/IP information or any property of the HTTP request (cookies, headers, URI, and more).

Extensive ACL System

Make advanced decisions based on any TCP/IP information or HTTP attribute with full logical operator support.

LUA Scripting Support

Extend and customize HAProxy with Lua scripts that have access to the request/response pipeline.

Reverse Proxy

Proxy all traffic from the Internet to your application servers through HAProxy, exposing only intended services and logging requests.

HTTP Validation

Validate that requests comply with the protocol specifications before sending them on to application servers.

Advanced Application-based DDoS Protection

Block requests from clients based on multiple metrics and criteria over a configurable time window.

Anomalous Behavior Protection

Combine multiple metrics about a client's behavior for smarter routing and access decisions.

Traffic Filtering

Use ACLs to detect any condition in HTTP(S) traffic and route or block the request as desired.

Search Engine Verification

Check the authenticity of any client that claims to be a search engine crawler and enforce response policies against those it categorizes as phony. The verification is performed in the background in real-time so that legitimate web crawlers are not blocked.

Web Application Firewall

Enable the high-performance Web Application Firewall, which supports multiple modes including denylist-based signature support, allowlist-only mode, and ModSecurity ruleset support.

Dynamic ACL Updates

Updates ACL, Map, or TLS ticket key files in memory normally loaded from disk during HAProxy startup during runtime.

JavaScript Challenge

Updates ACL, Map, or TLS ticket key files in memory normally loaded from disk during HAProxy startup during runtime.

reCAPTCHA

Present a Google reCAPTCHA v2 or v3 challenge to clients that exhibit anomalous traffic patterns.

Client Fingerprinting

Generate a unique identifier based on a client request.

High Performance SSL/TLS

Terminate TLS on the HAProxy load balancer, optionally establishing a TLS connection to the backend server for end-to-end encryption.

Advanced SSL Algorithm Selection

Automatically pick the optimal certificate for a given client, enabling simultaneous use of ECC and RSA.

HTTP/2 Support

Accelerate end-to-end communication using the HTTP/2 protocol.

gRPC

Route and load balance gRPC calls between services, taking advantage of its efficient, binary serialization.

Multithreading

Split processing across multiple threads while sharing the same memory space.

Connection Pooling

Reuse idle connections between HAProxy and your backend servers to save time.

Compression

Reduce bandwidth usage by compressing HTTP responses from backends before passing them on to clients.

Geolocation Support

Load geolocation databases from multiple vendors into HAProxy for advanced request handling, routing, and for passing information on to your application servers. Includes live updating of databases.

Device Intelligence

Gets information about a client by passing the user-agent string to one of HAProxy’s supported device detection databases.

Object Caching

Offload static content delivery from your application servers so they can perform their primary duty—delivering the application.

Traffic Shadowing

Mirror requests from one environment to another for testing new features

Hitless Reloads

Eliminate lost connections. Reloads of HAProxy Enterprise do not lose any connections during upgrades or changes to the configuration.

Route Health Injection (RHI)

An optimized version of a third party software that allows for the control of routing protocol announcements based on the health of the network and the HAProxy service for active/active clustering.

VRRP

An optimized version of the keepalived daemon for active/passive clustering.

Advanced Health Checks

Gain flexibility when monitoring your backend servers with both active and passive health checks. You can also deploy Agent software to remotely push state changes to HAProxy from your monitored servers.

Slow Start

Slowly increase the rate of new sessions sent to a backend when it comes up instead of sending traffic all at once.

Slow Stop

Drain requests from servers, while allowing users to finish their sessions.

Traffic Overload Protection

Limit the maximum number of connections assigned to application servers, either sending them to other server clusters or queuing the requests in HAProxy if that limit is reached.

Runtime API

Programmatically pull data from or make changes to HAProxy during runtime.

DNS for Service Discovery

Dynamically scale the number of application servers by querying a service registry over DNS.

Dynamic Server Creation and Management

Provision multiple application servers with a single server line to be filled in during runtime.

Extensive Logging

Log information about requests, with support for syslog and cloud-native logging.

Real-time Dashboard

View your services' health, traffic rates, and load aggregated across multiple load balancer instances. Administer enabling, disabling and draining of backends.

Cluster-wide Tracking

Provides realtime aggregated values from stick tables across multiple processes or servers in a cluster which allows for realtime cluster-wide tracking

SSO Module

Enable Single sign-on (SSO) on a Microsoft Active Directory domain.

Data Plane API

Programmatically add, modify or remove sections of your configuration using the HTTP API.

Authoritative Experts

The team which is authoritative on HAProxy.

Proactive

Proactive team will identify and resolve your issues before you even notice them.

Follow-The-Sun Support Model

Knowledgable in Linux, Networking, and HAProxy

No need to worry about searching documentation again.

24x7x365 Availability

Premium 24/7 support available.