HAProxy Enterprise

The World’s Smartest, Fastest, and Most Widely Used Software Load Balancer

HAProxy Enterprise is the industry’s leading software load balancer. It powers modern application delivery at any scale and in any environment, providing the utmost performance, observability and security.

HAProxy Enterprise
HAProxy Enterprise

HAProxy Enterprise

The World’s Fastest Software Load Balancer

HAProxy Enterprise is the industry’s leading software load balancer. It powers modern application delivery at any scale and in any environment, providing the utmost performance, observability and security.

HAProxy Enterprise Success Stories

Load Balancing
Kubernetes
Security
Service Mesh
Observability

Unparalleled Versatility

Key Capabilities

Load Balancing & High Availability

  • Active/Active (BGP/OSPF/RIP)
  • Active/Passive (VRRP)
  • Layers 4 – 7
  • Protocols: HTTP, HTTP/2, gRPC, FastCGI, Syslog, Financial Information eXchange (FIX), MQTT
  • Layer 4 & 7 Retries
  • Complex Routing Decisions
  • Multiple Deployment Patterns

Administration

  • Flexible Service Discovery
  • Runtime API (In-memory API)
  • Data Plane API (RESTful API)
  • Zero Downtime Reloads
  • Real-Time Dashboard

Application Acceleration

  • SSL Offloading
  • HTTP Compression
  • Connection Pooling
  • Small Object Cache

Security

  • Least Privileged Architecture
  • Multilayered Security
  • Advanced SSL/TLS
  • Client Certificate Authentication

Observability

  • Native Prometheus Integration
  • SNMP
  • Advanced Logging
  • End-to-end Request Timing
  • OpenTracing

HAProxy Enterprise Features

HAProxy

Rigorously Tested Core | Certified Packages

High-performance Modules

Web Application Firewall | Bot Management | Real-time Dashboard | Device Detection | Geolocation | Cluster-wide Tracking | DNS Load Shedding | Streaming Metrics | HTTP API | Traffic Mirroring

Expert Support

24x7x365 Support

Specialized Scripts and Tools

Active-Passive Clustering (Optimized VRRP) | SNMP Metrics | Route Health Injection (RHI) | Ansible Playbook

Supported Environments

Main Features of HAProxy Enterprise

Load Balancer

Comprehensive Load Balancing Methods

Load balance by round robin, least connections, URI, IP address and several hashing methods.


Advanced Routing Decisions

Send requests to specific application clusters based on URL, domain name, file extension, client IP address, health state of backends, number of active connections, SSL client certificate, and more.


Stickiness/Persistence

Maintain users' sessions based on TCP/IP information or any property of the HTTP request (cookies, headers, URI, and more).


Extensive ACL System

Make advanced decisions based on any TCP/IP information or HTTP attribute with full logical operator support.


LUA Scripting Support

Extend and customize HAProxy with Lua scripts that have access to the request/response pipeline.


Security Layer

Reverse Proxy

Proxy all traffic from the Internet to your application servers through HAProxy, exposing only intended services and logging requests.


HTTP Validation

Validate that requests comply with the protocol specifications before sending them on to application servers.


Advanced Application-based DDoS Protection

Block requests from clients based on multiple metrics and criteria over a configurable time window.


Anomalous Behavior Protection

Combine multiple metrics about a client's behavior for smarter routing and access decisions.


Traffic Filtering

Use ACLs to detect any condition in HTTP(S) traffic and route or block the request as desired.


Search Engine Verification

Check the authenticity of any client that claims to be a search engine crawler and enforce response policies against those it categorizes as phony. The verification is performed in the background in real-time so that legitimate web crawlers are not blocked.


Web Application Firewall

Enable the high-performance Web Application Firewall, which supports multiple modes including blacklist-based signature support, whitelist-only mode, and ModSecurity ruleset support.


Dynamic ACL Updates

Updates ACL, Map, or TLS ticket key files in memory normally loaded from disk during HAProxy startup during runtime.


JavaScript Challenge

[Updates ACL, Map, or TLS ticket key files in memory normally loaded from disk during HAProxy startup during runtime.]


reCAPTCHA

Present a Google reCAPTCHA v2 or v3 challenge to clients that exhibit anomalous traffic patterns.


Client Fingerprinting

Generate a unique identifier based on a client request.


Application Acceleration

High Performance SSL/TLS

Terminate TLS on the HAProxy load balancer, optionally establishing a TLS connection to the backend server for end-to-end encryption.


Advanced SSL Algorithm Selection

Automatically pick the optimal certificate for a given client, enabling simultaneous use of ECC and RSA.


HTTP/2 Support

Accelerate end-to-end communication using the HTTP/2 protocol.


gRPC

Route and load balance gRPC calls between services, taking advantage of its efficient, binary serialization.


Multithreading

Split processing across multiple threads while sharing the same memory space.


Object Caching

Offload static content delivery from your application servers so they can perform their primary duty—delivering the application.


Connection Pooling

Reuse idle connections between HAProxy and your backend servers to save time.


Compression

Reduce bandwidth usage by compressing HTTP responses from backends before passing them on to clients.


Geolocation Support

Load geolocation databases from multiple vendors into HAProxy for advanced request handling, routing, and for passing information on to your application servers. Includes live updating of databases.


Device Intelligence

Gets information about a client by passing the user-agent string to one of HAProxy’s supported device detection databases.


High Availability

Traffic Shadowing

Mirror requests from one environment to another for testing new features.


Hitless Reloads

Eliminate lost connections. Reloads of HAProxy Enterprise do not lose any connections during upgrades or changes to the configuration.


Route Health Injection (RHI)

An optimized version of a third party software that allows for the control of routing protocol announcements based on the health of the network and the HAProxy service for active/active clustering.


VRRP

An optimized version of the keepalived daemon for active/passive clustering.


Advanced Health Checks

Gain flexibility when monitoring your backend servers with both active and passive health checks. You can also deploy Agent software to remotely push state changes to HAProxy from your monitored servers.


Slow Start

Slowly increase the rate of new sessions sent to a backend when it comes up instead of sending traffic all at once.


Slow Stop

Drain requests from servers, while allowing users to finish their sessions.


Traffic Overload Protection

Limit the maximum number of connections assigned to application servers, either sending them to other server clusters or queuing the requests in HAProxy if that limit is reached.


Administration

Runtime API

Programmatically pull data from or make changes to HAProxy during runtime.


DNS for Service Discovery

Dynamically scale the number of application servers by querying a service registry over DNS.


Dynamic Server Creation and Management

Provision multiple application servers with a single server line to be filled in during runtime.


Extensive Logging

Log information about requests, with support for syslog and cloud-native logging.


Data Plane API

Programmatically add, modify or remove sections of your configuration using the HTTP API.


Real-Time Dashboard

View your services' health, traffic rates, and load aggregated across multiple load balancer instances. Administer enabling, disabling and draining of backends.


Cluster-wide Tracking

Provides realtime aggregated values from stick tables across multiple processes or servers in a cluster which allows for realtime cluster-wide tracking


SSO Module

Enable SSO (Single Sign On) on a Microsoft Active Directory domain.


Technical Support

Authoritative Experts

The team which is authoritative on HAProxy.


Knowledgable in Linux, Networking, and HAProxy

No need to worry about searching documentation again.


Proactive

Proactive team will identify and resolve your issues before you even notice them.


24x7x365 Availability

Premium 24/7 support available.


Follow-The-Sun Support Model