HAProxy Technologies
Looking for expert insights, technical articles, and industry news on application delivery and load balancing? You'll find all you need here.
- Posts
- 341 from 9 Jun 2011 to 28 Oct 2026
- Posting
- weekly (46 in the last year)
- Kind
- company blog
- Feed
- https://www.haproxy.com/feed
2026 35
- HAProxy is not vulnerable to HTTP2Shell (CVE-2026-111497)
- HAProxy Security Bulletin - Oct 21 2026
- October 2026 - CVE Security Bulletin
- HAProxy Enterprise WAF protects against PHP2Shell (CVE-2026-109618, CVE-2026-109619)
- How to prove your HAProxy build is legitimate
- AI in the public sector (infrastructure challenges and solutions)
- The big question at Black Hat USA 2026: "how do I know?"
- How to enable post-quantum cryptography and TLS termination with HAProxy
- How Liftoff cut costs by 87% and latency by 75% with HAProxy
- June 2026 – CVE-2026-55204: null pointer dereference in HAProxy's HPACK header handling
- AWS Summit London & NYC: what engineers want
- How Clover moved beyond blue-green deployments with HAProxy Fusion Control Plane
- Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy
- Announcing HAProxy 3.4
- Subsecond data center failover at Weller Truck Parts with HAProxy One
- HAProxy Enterprise WAF protects against Drupal core SA-CORE-2026-004 SQL Injection (CVE-2026-9082)
- How HAProxy built its modern application delivery architecture
- How Criteo handles 23M requests per second (RPS) with HAProxy Runtime API automation
- Announcing HAProxy Enterprise 3.3 and HAProxy ALOHA 18.0
- How PayPal hyperscaled Kubernetes routing with HAProxy Fusion
- HAProxy at KubeCon Amsterdam 2026: the standard, by popular demand
- Announcing HAProxy Unified Gateway 1.0
- Back to fundamentals: 7 insights from Kelsey Hightower at HAProxyConf
- Announcing HAProxy Fusion 2.0
- Streamlining your NIS2 and DORA compliance solution with HAProxy
- Securing 80,000 transactions per second at Infobip with HAProxy Enterprise WAF
- Load balancing VMware Horizon's UDP and TCP traffic: a guide with HAProxy
- Omnissa Horizon alternative: how HAProxy solves UDP load balancing
- Don't panic: a low-risk strategy for Ingress NGINX retirement
- February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service
- Zero crashes, zero compromises: inside the HAProxy security audit
- How Dartmouth avoided vendor lock-in and implemented LBaaS with HAProxy One
- Properly securing OpenClaw with authentication
- Universal Mesh in action: how PayPal solved multi-cloud complexity with HAProxy
- Announcing HAProxy Kubernetes Ingress Controller 3.2
2025 31
- How LinkedIn modernized its massive traffic stack with HAProxy
- Fresh from AWS re:Invent: Supercharging HAProxy Community with AWS-LC Performance Packages
- Sanitizing HTTP/1: a technical deep dive into HAProxy’s HTX abstraction layer
- Revolutionizing application security with the next-gen HAProxy Enterprise WAF
- HAProxy Enterprise WAF Protects Against React2Shell (CVE-2025-55182)
- Efficiency at any scale: How HAProxy maximizes the benefits of modern multi-core CPUs
- KubeCon NA 2025: Universal Mesh, federation, and the end of the "mesh tax"
- How Roblox uses HAProxy Enterprise to power gaming for 100 million daily users
- Announcing HAProxy 3.3
- Ingress NGINX Is Retiring. Here’s Your Path Forward with HAProxy
- Announcing HAProxy Unified Gateway (beta)
- Announcing HAProxy ALOHA 17.5
- Announcing HAProxy Enterprise 3.2
- October 2025 – CVE-2025-59303: secret leak in HAProxy Kubernetes Ingress Controller
- October 2025 – CVE-2025-11230: denial of service vulnerability in HAProxy mjson library
- Black Hat USA 2025 recap
- HAProxy Enterprise WAF protects against Microsoft SharePoint CVE-2025-53770 / CVE-2025-53771
- HAProxyConf 2025 Recap
- Announcing HAProxy 3.2
- Protecting against SAP NetWeaver vulnerability (CVE-2025-31324) with HAProxy
- The state of SSL stacks
- Lessons learned in LLM prompt security: securing AI with AI
- Choosing the right transport protocol: TCP vs. UDP vs. QUIC
- HAProxy goes big at KubeCon London 2025
- Protecting against Next.js middleware vulnerability CVE-2025-29927 with HAProxy
- Announcing HAProxy ALOHA 17.0
- Announcing HAProxy Enterprise 3.1
- Reviewing Every New Feature in HAProxy 3.1
- Announcing HAProxy Kubernetes Ingress Controller 3.1
- January 2025 – Multiple rsync CVEs impacting memory and file handling in Linux virtual images
- Announcing HAProxy Enterprise Kubernetes Ingress Controller 3.0
2024 33
- Lasting Impressions and Technical Tidbits From AWS re:Invent 2024
- Announcing HAProxy ALOHA 16.5
- Announcing HAProxy 3.1
- KubeCon NA 2024: service discovery, security, and AI — oh my!
- Announcing HAProxy Enterprise 3.0
- Nearly 90% of our AI crawler traffic is from TikTok parent ByteDance – lessons learned
- Announcing HAProxy Fusion 1.3
- Encoding HAProxy logs in machine-readable JSON or CBOR
- HAProxyConf 2025 call for papers now open
- Announcing HAProxy Data Plane API 3.0
- Easily Remove Existing HAProxy Connections Made via Client Authentication
- September 2024 – CVE-2024-45506: endless loop in HTTP/2 with zero-copy forwarding in HAProxy
- How To Identify Requests as Part of an End-To-End Tracing Strategy
- Zero-trust mTLS automation with HAProxy and SPIFFE/SPIRE
- How to achieve ultimate freedom with your load balancer
- Load Balancing RADIUS With HAProxy Enterprise UDP Module
- How to Reliably Block AI Crawlers Using HAProxy Enterprise
- The Customer Feedback Loop That Makes HAProxy G2’s Satisfaction Score Leader
- Create an HAProxy AI gateway to control LLM costs, security, and privacy
- Scalable AWS Load Balancing and Security With HAProxy Fusion
- July 2024 – CVE-2024-6387: RCE in OpenSSH server
- July 2024 – CVE-2024-24791: HTTP/1.1 response code mishandling in golang products
- Reviewing every new feature in HAProxy 3.0
- Announcing HAProxy Kubernetes Ingress Controller 3.0
- Announcing HAProxy 3.0
- Announcing HAProxy ALOHA 16
- Announcing HAProxy Enterprise 2.9
- HAProxy Fusion: New External Load Balancing & Multi-Cluster Routing Features
- HAProxy is Resilient to the HTTP/2 CONTINUATION Flood
- Sharing HAProxy’s Kubernetes story at KubeCon Europe 2024
- Announcing HAProxy Kubernetes Ingress Controller 1.11
- Software load balancers vs appliances: better performance & consistency with HAProxy
- Protect against NetScaler vulnerability CitrixBleed
2023 34
- Web App Security vs. API Security: Unified Approaches Reign Supreme
- Rate limiting based on AWS VPC ID
- Scalable Load Balancing & Security Made Simple at AWS re:Invent 2023
- Announcing HAProxy 2.9
- Announcing HAProxy Fusion 1.2 LTS
- KubeCon NA 2023: Celebrating Innovation and the K8s Community
- Why implementing app security can lead to spiraling costs
- How to Extract Insightful Data From Proxy Protocol Packets
- Why your load balancer should be fast & flexible
- HAProxy's growth continues with rave reviews and powerful capabilities
- HAProxy is not affected by the HTTP/2 Rapid Reset Attack (CVE-2023-44487)
- Announcing HAProxy Enterprise 2.8 & HAProxy ALOHA 15.5
- Your Comprehensive Guide to HAProxy Protocol Support
- August 2023 - CVE-2023-40225: Empty content-length header vulnerability fixed
- Black Hat USA: adaptable security from HAProxy
- How to Log HTTP Headers With HAProxy for Debugging Purposes
- December 2023 - CVE-2023-45539: HAProxy Accepts # as Part of the URI Component Fixed
- G2’s Most Recommended WAF & DDoS Protection
- What is the Kubernetes Gateway API?
- How to create powerful, customized Lua mailers in HAProxy
- Automate HAProxy Let's Encrypt certificates with acme.sh
- Announcing HAProxy Data Plane API 2.8
- Your Starter Guide to Using the HAProxy Lua Event Framework
- How to Enable QUIC Load Balancing on HAProxy
- HAProxy Fusion 1.1 Enables Application Delivery at Scale
- Announcing HAProxy 2.8
- Introduction to Traffic Shaping Using HAProxy
- Announcing HAProxy Data Plane API 2.7
- Announcing HAProxy Kubernetes Ingress Controller 1.10
- HAProxy Momentum: G2 Spring 2023 Edition
- Announcing HAProxy Enterprise 2.7 & HAProxy ALOHA 15
- KCD France Roundup: HAProxy Evolving Alongside Kubernetes & Cloud-Native Community
- HAProxy Fusion has landed (simple, scalable, and secure)
- February 2023 – CVE-2023-25725: Header Parser Fixed
2022 29
- HAProxy user reviews show community momentum
- Announcing HAProxy 2.7 and HAProxy Enterprise 2.7r1
- Most Common Website Security Threats
- HAProxyConf 2022 Recap
- Secure cookies using HAProxy Enterprise
- Upgrade OpenSSL 3.0 to Protect Against a Critical Vulnerability
- Containers vs virtual machines (VMs): differences and use cases
- Fundamentals: application acceleration & the benefits for your service delivery
- Verify OAuth JWT Tokens With HAProxy
- Fundamentals: What is an API Gateway?
- Fundamentals: load balancing & the right distribution algorithm for you
- Fundamentals: High Availability & the Role of a Reverse Proxy
- Path-Based Routing With HAProxy
- Restrict API Access With Client Certificates (mTLS)
- Log Forwarding With HAProxy & Syslog
- Preserve stick table data when reloading HAProxy
- Announcing HAProxy Data Plane API 2.6
- HAProxyConf 2022 call for papers now open
- Custom Resources With HAProxy Kubernetes Ingress Controller
- Announcing HAProxy Kubernetes Ingress Controller 1.8
- Announcing HAProxy 2.6
- What is the PROXY protocol? How it preserves client IPs
- Two ways to enable sticky sessions in HAProxy (guide)
- April/2022 – CVE-2022-22965: Spring4Shell Remote Code Execution Mitigation
- Use Your Load Balancer to Monitor Application Health
- Announcing HAProxy Data Plane API 2.5
- How load balancing improves the performance of your applications
- Load Balance an Infinite Number of Servers & Never Reload HAProxy
- What is load balancing and how does It work?
2021 35
- December/2021 – CVE-2021-44228: Log4Shell Remote Code Execution Mitigation
- Announcing HAProxy 2.5
- Willy Tarreau on HAProxy at its 20 year anniversary (interview)
- Announcing HAProxy Data Plane API 2.4
- Announcing HAProxy Kubernetes Ingress Controller 1.7
- A guide to HAProxy health checks for high availability
- Rate Limiting with the HAProxy Kubernetes Ingress Controller
- September/2021–CVE-2021-40346: Duplicate ‘Content-Length’ Header Fixed
- How to check and test your HAProxy configuration safely
- The HAProxy APIs (What You Should Know)
- How to install the latest HAProxy on Ubuntu
- August/2021 – HAProxy 2.0+ HTTP/2 Vulnerabilities Fixed
- How to run HAProxy with Docker
- AWS EC2 Service Discovery With HAProxy (Step by Step Guide)
- HAProxyConf 2021 Call for Papers
- HAProxy load balancer configuration basics
- Run the HAProxy Kubernetes Ingress Controller Outside of Your Kubernetes Cluster
- Consul service discovery for HAProxy (integration guide)
- Visualize HAProxy metrics with InfluxDB
- Announcing HAProxy 2.4
- Announcing HAProxy Data Plane API 2.3
- Announcing HAProxy Kubernetes Ingress Controller 1.6
- Autoscaling with the HAProxy Kubernetes Ingress Controller & KEDA
- Power Your Consul Service Mesh With HAProxy
- HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance
- HAProxy Enterprise 2.3 & HAProxy 2.4 support the Financial Information eXchange (FIX) protocol
- Using HAProxy as an API Gateway, Part 6 [Security]
- Using HAProxy as an API Gateway, Part 5 [Monetization]
- Logging With the HAProxy Kubernetes Ingress Controller
- Using HAProxy as an API gateway, part 4 [metrics]
- How to Map Domain Names to Backend Server Pools With HAProxy
- Protect servers with HAProxy connection limits & queues
- Announcing HAProxy Kubernetes Ingress Controller 1.5
- Announcing HAProxy Data Plane API 2.2
- 2 Ways to Implement a Circuit Breaker in HAProxy (Guide)
2020 30
- Route SSH Connections With HAProxy
- HTTP keep-alive, pipelining, multiplexing & connection pooling
- HAProxy log sampling & cost-saving benefits | 2 examples
- Layer 4 vs Layer 7 Proxy Mode (Understanding the Difference)
- vSphere 7 With Tanzu Integrates With HAProxy for Load Balancing Enterprise-Grade Kubernetes
- Announcing HAProxy 2.3
- Accelerate Your APIs by Using the HAProxy Cache
- HAProxy & HTTP Strict Transport Security (HSTS)
- Redirect HTTP to HTTPS in a Few Easy Steps With HAProxy
- Serve dynamic custom error pages with HAProxy
- CVE-2020-15598: HAProxy Enterprise Unaffected Due to ModSecurity Hardening Measures
- Is That Bot Really Googlebot? Detecting Fake Crawlers With HAProxy Enterprise
- Become FIPS Compliant With HAProxy Enterprise on Red Hat Enterprise Linux 8
- HAProxy Enterprise Offers SAML-based Single Sign-On
- Dynamic SSL certificate storage in HAProxy
- Use HAProxy response policies to stop threats
- Enable TLS with Let’s Encrypt and HAProxy Kubernetes Ingress Controller
- Announcing HAProxy Data Plane API 2.1
- Get to know the HAProxy process manager
- Announcing HAProxy 2.2
- Announcing HAProxy Data Plane API 2.0
- HAProxy Enterprise Ingress Controller Coming Soon to the Red Hat Marketplace
- HAProxy 1.8+ HTTP/2 HPACK decoder vulnerability fixed
- Use Helm to Install the HAProxy Kubernetes Ingress Controller
- Multi-Tenant Kubernetes Clusters With the HAProxy Kubernetes Ingress Controller
- Load Balancing PHP-FPM With HAProxy & FastCGI
- We’re building a rich ecosystem of certified HAProxy integrations
- Rolling Updates & Blue-Green Deployments With Kubernetes & HAProxy
- HAProxyConf 2019 Recap
- Building blocks of a modern proxy (9 key features)
2019 26
- HAProxy 2.1: Supercharged Performance & Streamlined Codebase
- The History of HAProxy
- HAProxy on Docker Swarm: load balancing & DNS service discovery
- PacketShield: A Tool for Superior DDoS Protection
- Introducing HAProxyConf 2019
- How to Enable CORS (Cross-Origin Resource Sharing) in HAProxy?
- HAProxy rate limiting: four examples
- HAProxy Traffic Mirroring for Real-World Testing
- HAProxy Layer 7 Retries & Chaos Engineering
- Dissecting the HAProxy Kubernetes Ingress Controller
- The New HAProxy Data Plane API: Two Examples of Programmatic Configuration
- HAProxy SSL termination (offloading) in 5 simple steps
- HAProxy 2.0 & beyond
- Tracing requests through HAProxy with AWS X-Ray
- DNS for Service Discovery in HAProxy
- 5 Ways to Extend HAProxy With Lua
- HAProxy Stats page: a complete guide to all metrics
- HAProxy on AWS: Best Practices Part 3
- HAProxy Exposes a Prometheus Metrics Endpoint
- Extend HAProxy with Stream Processing Offload Engine (SPOE)
- IP masking in HAProxy
- Using HAProxy as an API gateway, part 3 [health checks]
- Test driving “power of two random choices” load balancing
- Introduction to HAProxy logging
- Using HAProxy as an API Gateway, Part 2 [Authentication]
- HAProxy 1.9.2 adds gRPC support
2018 15
- HAProxy 1.9 Has Arrived
- Building a Service Mesh With HAProxy & Consul
- Bot protection with HAProxy
- Application Layer DDoS Attack Protection With HAProxy
- HAProxy configuration file: global, defaults, front and backend
- Introduction to HAProxy Maps
- HAProxy on AWS: best practices part 2
- Using HAProxy as an API gateway, part 1 [introduction]
- Introduction to HAProxy stick tables
- HAProxy ACLs: a complete guide with examples
- Hitless Reloads With HAProxy (How-To Configuration Guide)
- Let’s Encrypt (ACMEv2) for HAProxy
- Announcing HAProxy Enterprise 1.8r1
- HAProxy & Consul With DNS for Service Discovery
- HAProxy on AWS: Best Practices Part 1
2017 8
- Multithreading in HAProxy
- HAProxy Enterprise Edition now on AWS marketplace
- Dynamic configuration with the HAProxy Runtime API
- TLS 1.3 & 0-RTT in HAProxy
- Announcing HAProxy 1.8
- Dynamic Scaling for Microservices With the HAProxy Runtime API
- Truly Seamless Reloads With HAProxy – No More Hacks!
- Using HAProxy With the Proxy Protocol to Better Secure Your Database
2016 4
2015 6
- HAProxy & Container IP Changes in Docker
- Announcing HAProxy 1.6
- Serving ECC & RSA Certificates on Same IP With HAProxy
- HAProxy’s Load Balancing Algorithm for Static Content Delivery With Varnish
- Microsoft Remote Desktop Services (RDS) Load Balancing
- A HTTP Monitor Which Matches Multiple Conditions in HAProxy
2014 9
- HAProxy and SSLv3 POODLE vulnerability
- Mitigating the Shellshock Vulnerability With HAProxy
- PHP-FPM/FastCGI probe example (binary health check with HAProxy 1.5)
- What is the HTTP 408 Request Timeout error? (+ how to fix it)
- How to write Apache ProxyPass* rules in HAProxy?
- Linux Asymmetric Routing Using Multiple Default Gateways
- How to Protect Application Cookies While Offloading SSL
- Emulating Active/Passive Application Clustering With HAProxy
- HAProxy Advanced Redis Health Check
2013 11
- Failover & Worst Case Management With HAProxy
- Configuring HAProxy & Nginx for SPDY
- Transparent proxying & binding with HAProxy & ALOHA load balancer
- SSL client certificate information in HTTP headers & logs
- Apache Linux/Cdorked.A backdoor detection
- Brute Force Attacks in WordPress (HAProxy Prevention Guide)
- Client IP Persistence or Source IP Hash Load Balancing
- Configure Syslog-ng to Log Readable HTTP URL From HAProxy
- IIS 6.0 appsession cookie and PCI compliance
- SSL Offloading Impact on Web Applications
- Mitigating the SSL BEAST attack using the ALOHA load balancer
2012 21
- Microsoft Exchange 2013 Load Balancing With HAProxy
- HAProxy, High MySQL Request Rate and TCP Source Port Exhaustion
- Exchange Outlook Web Access (OWA) Cross Site Request Forgery (CSRF) protection
- HAProxy and WebSockets: a guide with configuration examples
- Customizing HAProxy log formats (with examples)
- HAProxy and Gzip Compression
- Scalable WAF Protection With HAProxy & Apache With ModSecurity
- SSL client certificate management at application level
- Highly available RTMP platform with HAProxy & crtmpserver
- eCommerce Application Delivery Controller (Configuration Guide)
- How to Get SSL With HAProxy Getting Rid of Stunnel, Stud, NGINX or Pound
- How to: SSL Native in HAProxy
- How to Use HAProxy & Varnish Together on a Single Domain Name
- HAProxy vs Varnish (Complete Comparison)
- HTTP request flood mitigation
- Use the GeoIP Database With HAProxy (Easy to Follow Guide)
- Efficient SMTP Relay Infrastructure With Postfix & Load Balancers
- Preserve Source IP Address Despite Reverse Proxies (Guide)
- Hypervisors Performance Comparison & Benchmarking (Unbiased)
- Enhanced SSL Load Balancing With Server Name Indication (SNI) TLS Extension
- Load Balancing, Affinity, Persistence & Sticky Sessions
2011 14
- Microsoft Terminal Server / RemoteApp Load Balancing
- Using ALOHA load balancer as a Reverse Proxy (Guide)
- Benchmarking SSL performance
- Layer 4 load balancing tunnel mode
- Layer 4 Load Balancing Direct Server Return Mode
- Layer 4 Load Balancing NAT Mode
- Send users to the same server for IMAP & SMTP
- Send User to the Same Backend for both HTTP & HTTPS
- Protect Your Web Server Against Slowloris Attack
- Maintain affinity based on SSL session ID
- How to play with maxconn to avoid server slowness or crash
- Smart Content Switching for a News Website
- HAProxy Aloha Layer 7 IPv6 to IPv4 Configuration (Guide)
- Layer 4 vs Layer 7 Load Balancing (Differences Explained)