The Curious Engineer

All blogs / Networking

HAProxy Technologies

haproxy.com/blog

Looking for expert insights, technical articles, and industry news on application delivery and load balancing? You'll find all you need here.

NetworkingSecurityDevOps / SRE / infrastructure

Posts
341 from 9 Jun 2011 to 28 Oct 2026
Posting
weekly (46 in the last year)
Kind
company blog
Feed
https://www.haproxy.com/feed

2026 35

  1. HAProxy is not vulnerable to HTTP2Shell (CVE-2026-111497)
  2. HAProxy Security Bulletin - Oct 21 2026
  3. October 2026 - CVE Security Bulletin
  4. HAProxy Enterprise WAF protects against PHP2Shell (CVE-2026-109618, CVE-2026-109619)
  5. How to prove your HAProxy build is legitimate
  6. AI in the public sector (infrastructure challenges and solutions)
  7. The big question at Black Hat USA 2026: "how do I know?"
  8. How to enable post-quantum cryptography and TLS termination with HAProxy
  9. How Liftoff cut costs by 87% and latency by 75% with HAProxy
  10. June 2026 – CVE-2026-55204: null pointer dereference in HAProxy's HPACK header handling
  11. AWS Summit London & NYC: what engineers want
  12. How Clover moved beyond blue-green deployments with HAProxy Fusion Control Plane
  13. Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy
  14. Announcing HAProxy 3.4
  15. Subsecond data center failover at Weller Truck Parts with HAProxy One
  16. HAProxy Enterprise WAF protects against Drupal core SA-CORE-2026-004 SQL Injection (CVE-2026-9082)
  17. How HAProxy built its modern application delivery architecture
  18. How Criteo handles 23M requests per second (RPS) with HAProxy Runtime API automation
  19. Announcing HAProxy Enterprise 3.3 and HAProxy ALOHA 18.0
  20. How PayPal hyperscaled Kubernetes routing with HAProxy Fusion
  21. HAProxy at KubeCon Amsterdam 2026: the standard, by popular demand
  22. Announcing HAProxy Unified Gateway 1.0
  23. Back to fundamentals: 7 insights from Kelsey Hightower at HAProxyConf
  24. Announcing HAProxy Fusion 2.0
  25. Streamlining your NIS2 and DORA compliance solution with HAProxy
  26. Securing 80,000 transactions per second at Infobip with HAProxy Enterprise WAF
  27. Load balancing VMware Horizon's UDP and TCP traffic: a guide with HAProxy
  28. Omnissa Horizon alternative: how HAProxy solves UDP load balancing
  29. Don't panic: a low-risk strategy for Ingress NGINX retirement
  30. February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service
  31. Zero crashes, zero compromises: inside the HAProxy security audit
  32. How Dartmouth avoided vendor lock-in and implemented LBaaS with HAProxy One
  33. Properly securing OpenClaw with authentication
  34. Universal Mesh in action: how PayPal solved multi-cloud complexity with HAProxy
  35. Announcing HAProxy Kubernetes Ingress Controller 3.2

2025 31

  1. How LinkedIn modernized its massive traffic stack with HAProxy
  2. Fresh from AWS re:Invent: Supercharging HAProxy Community with AWS-LC Performance Packages
  3. Sanitizing HTTP/1: a technical deep dive into HAProxy’s HTX abstraction layer
  4. Revolutionizing application security with the next-gen HAProxy Enterprise WAF
  5. HAProxy Enterprise WAF Protects Against React2Shell (CVE-2025-55182)
  6. Efficiency at any scale: How HAProxy maximizes the benefits of modern multi-core CPUs
  7. KubeCon NA 2025: Universal Mesh, federation, and the end of the "mesh tax"
  8. How Roblox uses HAProxy Enterprise to power gaming for 100 million daily users
  9. Announcing HAProxy 3.3
  10. Ingress NGINX Is Retiring. Here’s Your Path Forward with HAProxy
  11. Announcing HAProxy Unified Gateway (beta)
  12. Announcing HAProxy ALOHA 17.5
  13. Announcing HAProxy Enterprise 3.2
  14. October 2025 – CVE-2025-59303: secret leak in HAProxy Kubernetes Ingress Controller
  15. October 2025 – CVE-2025-11230: denial of service vulnerability in HAProxy mjson library
  16. Black Hat USA 2025 recap
  17. HAProxy Enterprise WAF protects against Microsoft SharePoint CVE-2025-53770 / CVE-2025-53771
  18. HAProxyConf 2025 Recap
  19. Announcing HAProxy 3.2
  20. Protecting against SAP NetWeaver vulnerability (CVE-2025-31324) with HAProxy
  21. The state of SSL stacks
  22. Lessons learned in LLM prompt security: securing AI with AI
  23. Choosing the right transport protocol: TCP vs. UDP vs. QUIC
  24. HAProxy goes big at KubeCon London 2025
  25. Protecting against Next.js middleware vulnerability CVE-2025-29927 with HAProxy
  26. Announcing HAProxy ALOHA 17.0
  27. Announcing HAProxy Enterprise 3.1
  28. Reviewing Every New Feature in HAProxy 3.1
  29. Announcing HAProxy Kubernetes Ingress Controller 3.1
  30. January 2025 – Multiple rsync CVEs impacting memory and file handling in Linux virtual images
  31. Announcing HAProxy Enterprise Kubernetes Ingress Controller 3.0

2024 33

  1. Lasting Impressions and Technical Tidbits From AWS re:Invent 2024
  2. Announcing HAProxy ALOHA 16.5
  3. Announcing HAProxy 3.1
  4. KubeCon NA 2024: service discovery, security, and AI — oh my!
  5. Announcing HAProxy Enterprise 3.0
  6. Nearly 90% of our AI crawler traffic is from TikTok parent ByteDance – lessons learned
  7. Announcing HAProxy Fusion 1.3
  8. Encoding HAProxy logs in machine-readable JSON or CBOR
  9. HAProxyConf 2025 call for papers now open
  10. Announcing HAProxy Data Plane API 3.0
  11. Easily Remove Existing HAProxy Connections Made via Client Authentication
  12. September 2024 – CVE-2024-45506: endless loop in HTTP/2 with zero-copy forwarding in HAProxy
  13. How To Identify Requests as Part of an End-To-End Tracing Strategy
  14. Zero-trust mTLS automation with HAProxy and SPIFFE/SPIRE
  15. How to achieve ultimate freedom with your load balancer
  16. Load Balancing RADIUS With HAProxy Enterprise UDP Module
  17. How to Reliably Block AI Crawlers Using HAProxy Enterprise
  18. The Customer Feedback Loop That Makes HAProxy G2’s Satisfaction Score Leader
  19. Create an HAProxy AI gateway to control LLM costs, security, and privacy
  20. Scalable AWS Load Balancing and Security With HAProxy Fusion
  21. July 2024 – CVE-2024-6387: RCE in OpenSSH server
  22. July 2024 – CVE-2024-24791: HTTP/1.1 response code mishandling in golang products
  23. Reviewing every new feature in HAProxy 3.0
  24. Announcing HAProxy Kubernetes Ingress Controller 3.0
  25. Announcing HAProxy 3.0
  26. Announcing HAProxy ALOHA 16
  27. Announcing HAProxy Enterprise 2.9
  28. HAProxy Fusion: New External Load Balancing & Multi-Cluster Routing Features
  29. HAProxy is Resilient to the HTTP/2 CONTINUATION Flood
  30. Sharing HAProxy’s Kubernetes story at KubeCon Europe 2024
  31. Announcing HAProxy Kubernetes Ingress Controller 1.11
  32. Software load balancers vs appliances: better performance & consistency with HAProxy
  33. Protect against NetScaler vulnerability CitrixBleed

2023 34

  1. Web App Security vs. API Security: Unified Approaches Reign Supreme
  2. Rate limiting based on AWS VPC ID
  3. Scalable Load Balancing & Security Made Simple at AWS re:Invent 2023
  4. Announcing HAProxy 2.9
  5. Announcing HAProxy Fusion 1.2 LTS
  6. KubeCon NA 2023: Celebrating Innovation and the K8s Community
  7. Why implementing app security can lead to spiraling costs
  8. How to Extract Insightful Data From Proxy Protocol Packets
  9. Why your load balancer should be fast & flexible
  10. HAProxy's growth continues with rave reviews and powerful capabilities
  11. HAProxy is not affected by the HTTP/2 Rapid Reset Attack (CVE-2023-44487)
  12. Announcing HAProxy Enterprise 2.8 & HAProxy ALOHA 15.5
  13. Your Comprehensive Guide to HAProxy Protocol Support
  14. August 2023 - CVE-2023-40225: Empty content-length header vulnerability fixed
  15. Black Hat USA: adaptable security from HAProxy
  16. How to Log HTTP Headers With HAProxy for Debugging Purposes
  17. December 2023 - CVE-2023-45539: HAProxy Accepts # as Part of the URI Component Fixed
  18. G2’s Most Recommended WAF & DDoS Protection
  19. What is the Kubernetes Gateway API?
  20. How to create powerful, customized Lua mailers in HAProxy
  21. Automate HAProxy Let's Encrypt certificates with acme.sh
  22. Announcing HAProxy Data Plane API 2.8
  23. Your Starter Guide to Using the HAProxy Lua Event Framework
  24. How to Enable QUIC Load Balancing on HAProxy
  25. HAProxy Fusion 1.1 Enables Application Delivery at Scale
  26. Announcing HAProxy 2.8
  27. Introduction to Traffic Shaping Using HAProxy
  28. Announcing HAProxy Data Plane API 2.7
  29. Announcing HAProxy Kubernetes Ingress Controller 1.10
  30. HAProxy Momentum: G2 Spring 2023 Edition
  31. Announcing HAProxy Enterprise 2.7 & HAProxy ALOHA 15
  32. KCD France Roundup: HAProxy Evolving Alongside Kubernetes & Cloud-Native Community
  33. HAProxy Fusion has landed (simple, scalable, and secure)
  34. February 2023 – CVE-2023-25725: Header Parser Fixed

2022 29

  1. HAProxy user reviews show community momentum
  2. Announcing HAProxy 2.7 and HAProxy Enterprise 2.7r1
  3. Most Common Website Security Threats
  4. HAProxyConf 2022 Recap
  5. Secure cookies using HAProxy Enterprise
  6. Upgrade OpenSSL 3.0 to Protect Against a Critical Vulnerability
  7. Containers vs virtual machines (VMs): differences and use cases
  8. Fundamentals: application acceleration & the benefits for your service delivery
  9. Verify OAuth JWT Tokens With HAProxy
  10. Fundamentals: What is an API Gateway?
  11. Fundamentals: load balancing & the right distribution algorithm for you
  12. Fundamentals: High Availability & the Role of a Reverse Proxy
  13. Path-Based Routing With HAProxy
  14. Restrict API Access With Client Certificates (mTLS)
  15. Log Forwarding With HAProxy & Syslog
  16. Preserve stick table data when reloading HAProxy
  17. Announcing HAProxy Data Plane API 2.6
  18. HAProxyConf 2022 call for papers now open
  19. Custom Resources With HAProxy Kubernetes Ingress Controller
  20. Announcing HAProxy Kubernetes Ingress Controller 1.8
  21. Announcing HAProxy 2.6
  22. What is the PROXY protocol? How it preserves client IPs
  23. Two ways to enable sticky sessions in HAProxy (guide)
  24. April/2022 – CVE-2022-22965: Spring4Shell Remote Code Execution Mitigation
  25. Use Your Load Balancer to Monitor Application Health
  26. Announcing HAProxy Data Plane API 2.5
  27. How load balancing improves the performance of your applications
  28. Load Balance an Infinite Number of Servers & Never Reload HAProxy
  29. What is load balancing and how does It work?

2021 35

  1. December/2021 – CVE-2021-44228: Log4Shell Remote Code Execution Mitigation
  2. Announcing HAProxy 2.5
  3. Willy Tarreau on HAProxy at its 20 year anniversary (interview)
  4. Announcing HAProxy Data Plane API 2.4
  5. Announcing HAProxy Kubernetes Ingress Controller 1.7
  6. A guide to HAProxy health checks for high availability
  7. Rate Limiting with the HAProxy Kubernetes Ingress Controller
  8. September/2021–CVE-2021-40346: Duplicate ‘Content-Length’ Header Fixed
  9. How to check and test your HAProxy configuration safely
  10. The HAProxy APIs (What You Should Know)
  11. How to install the latest HAProxy on Ubuntu
  12. August/2021 – HAProxy 2.0+ HTTP/2 Vulnerabilities Fixed
  13. How to run HAProxy with Docker
  14. AWS EC2 Service Discovery With HAProxy (Step by Step Guide)
  15. HAProxyConf 2021 Call for Papers
  16. HAProxy load balancer configuration basics
  17. Run the HAProxy Kubernetes Ingress Controller Outside of Your Kubernetes Cluster
  18. Consul service discovery for HAProxy (integration guide)
  19. Visualize HAProxy metrics with InfluxDB
  20. Announcing HAProxy 2.4
  21. Announcing HAProxy Data Plane API 2.3
  22. Announcing HAProxy Kubernetes Ingress Controller 1.6
  23. Autoscaling with the HAProxy Kubernetes Ingress Controller & KEDA
  24. Power Your Consul Service Mesh With HAProxy
  25. HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance
  26. HAProxy Enterprise 2.3 & HAProxy 2.4 support the Financial Information eXchange (FIX) protocol
  27. Using HAProxy as an API Gateway, Part 6 [Security]
  28. Using HAProxy as an API Gateway, Part 5 [Monetization]
  29. Logging With the HAProxy Kubernetes Ingress Controller
  30. Using HAProxy as an API gateway, part 4 [metrics]
  31. How to Map Domain Names to Backend Server Pools With HAProxy
  32. Protect servers with HAProxy connection limits & queues
  33. Announcing HAProxy Kubernetes Ingress Controller 1.5
  34. Announcing HAProxy Data Plane API 2.2
  35. 2 Ways to Implement a Circuit Breaker in HAProxy (Guide)

2020 30

  1. Route SSH Connections With HAProxy
  2. HTTP keep-alive, pipelining, multiplexing & connection pooling
  3. HAProxy log sampling & cost-saving benefits | 2 examples
  4. Layer 4 vs Layer 7 Proxy Mode (Understanding the Difference)
  5. vSphere 7 With Tanzu Integrates With HAProxy for Load Balancing Enterprise-Grade Kubernetes
  6. Announcing HAProxy 2.3
  7. Accelerate Your APIs by Using the HAProxy Cache
  8. HAProxy & HTTP Strict Transport Security (HSTS)
  9. Redirect HTTP to HTTPS in a Few Easy Steps With HAProxy
  10. Serve dynamic custom error pages with HAProxy
  11. CVE-2020-15598: HAProxy Enterprise Unaffected Due to ModSecurity Hardening Measures
  12. Is That Bot Really Googlebot? Detecting Fake Crawlers With HAProxy Enterprise
  13. Become FIPS Compliant With HAProxy Enterprise on Red Hat Enterprise Linux 8
  14. HAProxy Enterprise Offers SAML-based Single Sign-On
  15. Dynamic SSL certificate storage in HAProxy
  16. Use HAProxy response policies to stop threats
  17. Enable TLS with Let’s Encrypt and HAProxy Kubernetes Ingress Controller
  18. Announcing HAProxy Data Plane API 2.1
  19. Get to know the HAProxy process manager
  20. Announcing HAProxy 2.2
  21. Announcing HAProxy Data Plane API 2.0
  22. HAProxy Enterprise Ingress Controller Coming Soon to the Red Hat Marketplace
  23. HAProxy 1.8+ HTTP/2 HPACK decoder vulnerability fixed
  24. Use Helm to Install the HAProxy Kubernetes Ingress Controller
  25. Multi-Tenant Kubernetes Clusters With the HAProxy Kubernetes Ingress Controller
  26. Load Balancing PHP-FPM With HAProxy & FastCGI
  27. We’re building a rich ecosystem of certified HAProxy integrations
  28. Rolling Updates & Blue-Green Deployments With Kubernetes & HAProxy
  29. HAProxyConf 2019 Recap
  30. Building blocks of a modern proxy (9 key features)

2019 26

  1. HAProxy 2.1: Supercharged Performance & Streamlined Codebase
  2. The History of HAProxy
  3. HAProxy on Docker Swarm: load balancing & DNS service discovery
  4. PacketShield: A Tool for Superior DDoS Protection
  5. Introducing HAProxyConf 2019
  6. How to Enable CORS (Cross-Origin Resource Sharing) in HAProxy?
  7. HAProxy rate limiting: four examples
  8. HAProxy Traffic Mirroring for Real-World Testing
  9. HAProxy Layer 7 Retries & Chaos Engineering
  10. Dissecting the HAProxy Kubernetes Ingress Controller
  11. The New HAProxy Data Plane API: Two Examples of Programmatic Configuration
  12. HAProxy SSL termination (offloading) in 5 simple steps
  13. HAProxy 2.0 & beyond
  14. Tracing requests through HAProxy with AWS X-Ray
  15. DNS for Service Discovery in HAProxy
  16. 5 Ways to Extend HAProxy With Lua
  17. HAProxy Stats page: a complete guide to all metrics
  18. HAProxy on AWS: Best Practices Part 3
  19. HAProxy Exposes a Prometheus Metrics Endpoint
  20. Extend HAProxy with Stream Processing Offload Engine (SPOE)
  21. IP masking in HAProxy
  22. Using HAProxy as an API gateway, part 3 [health checks]
  23. Test driving “power of two random choices” load balancing
  24. Introduction to HAProxy logging
  25. Using HAProxy as an API Gateway, Part 2 [Authentication]
  26. HAProxy 1.9.2 adds gRPC support

2018 15

  1. HAProxy 1.9 Has Arrived
  2. Building a Service Mesh With HAProxy & Consul
  3. Bot protection with HAProxy
  4. Application Layer DDoS Attack Protection With HAProxy
  5. HAProxy configuration file: global, defaults, front and backend
  6. Introduction to HAProxy Maps
  7. HAProxy on AWS: best practices part 2
  8. Using HAProxy as an API gateway, part 1 [introduction]
  9. Introduction to HAProxy stick tables
  10. HAProxy ACLs: a complete guide with examples
  11. Hitless Reloads With HAProxy (How-To Configuration Guide)
  12. Let’s Encrypt (ACMEv2) for HAProxy
  13. Announcing HAProxy Enterprise 1.8r1
  14. HAProxy & Consul With DNS for Service Discovery
  15. HAProxy on AWS: Best Practices Part 1

2017 8

  1. Multithreading in HAProxy
  2. HAProxy Enterprise Edition now on AWS marketplace
  3. Dynamic configuration with the HAProxy Runtime API
  4. TLS 1.3 & 0-RTT in HAProxy
  5. Announcing HAProxy 1.8
  6. Dynamic Scaling for Microservices With the HAProxy Runtime API
  7. Truly Seamless Reloads With HAProxy – No More Hacks!
  8. Using HAProxy With the Proxy Protocol to Better Secure Your Database

2016 4

  1. HAProxy Technologies offers free hardware load balancers to students and interns
  2. ALOHA Pocket is Coming…
  3. HAProxy and ELK (Elasticsearch, Logstash and Kibana) Stack
  4. What is a Slow POST Attack & How to Prevent One? (Guide)

2015 6

  1. HAProxy & Container IP Changes in Docker
  2. Announcing HAProxy 1.6
  3. Serving ECC & RSA Certificates on Same IP With HAProxy
  4. HAProxy’s Load Balancing Algorithm for Static Content Delivery With Varnish
  5. Microsoft Remote Desktop Services (RDS) Load Balancing
  6. A HTTP Monitor Which Matches Multiple Conditions in HAProxy

2014 9

  1. HAProxy and SSLv3 POODLE vulnerability
  2. Mitigating the Shellshock Vulnerability With HAProxy
  3. PHP-FPM/FastCGI probe example (binary health check with HAProxy 1.5)
  4. What is the HTTP 408 Request Timeout error? (+ how to fix it)
  5. How to write Apache ProxyPass* rules in HAProxy?
  6. Linux Asymmetric Routing Using Multiple Default Gateways
  7. How to Protect Application Cookies While Offloading SSL
  8. Emulating Active/Passive Application Clustering With HAProxy
  9. HAProxy Advanced Redis Health Check

2013 11

  1. Failover & Worst Case Management With HAProxy
  2. Configuring HAProxy & Nginx for SPDY
  3. Transparent proxying & binding with HAProxy & ALOHA load balancer
  4. SSL client certificate information in HTTP headers & logs
  5. Apache Linux/Cdorked.A backdoor detection
  6. Brute Force Attacks in WordPress (HAProxy Prevention Guide)
  7. Client IP Persistence or Source IP Hash Load Balancing
  8. Configure Syslog-ng to Log Readable HTTP URL From HAProxy
  9. IIS 6.0 appsession cookie and PCI compliance
  10. SSL Offloading Impact on Web Applications
  11. Mitigating the SSL BEAST attack using the ALOHA load balancer

2012 21

  1. Microsoft Exchange 2013 Load Balancing With HAProxy
  2. HAProxy, High MySQL Request Rate and TCP Source Port Exhaustion
  3. Exchange Outlook Web Access (OWA) Cross Site Request Forgery (CSRF) protection
  4. HAProxy and WebSockets: a guide with configuration examples
  5. Customizing HAProxy log formats (with examples)
  6. HAProxy and Gzip Compression
  7. Scalable WAF Protection With HAProxy & Apache With ModSecurity
  8. SSL client certificate management at application level
  9. Highly available RTMP platform with HAProxy & crtmpserver
  10. eCommerce Application Delivery Controller (Configuration Guide)
  11. How to Get SSL With HAProxy Getting Rid of Stunnel, Stud, NGINX or Pound
  12. How to: SSL Native in HAProxy
  13. How to Use HAProxy & Varnish Together on a Single Domain Name
  14. HAProxy vs Varnish (Complete Comparison)
  15. HTTP request flood mitigation
  16. Use the GeoIP Database With HAProxy (Easy to Follow Guide)
  17. Efficient SMTP Relay Infrastructure With Postfix & Load Balancers
  18. Preserve Source IP Address Despite Reverse Proxies (Guide)
  19. Hypervisors Performance Comparison & Benchmarking (Unbiased)
  20. Enhanced SSL Load Balancing With Server Name Indication (SNI) TLS Extension
  21. Load Balancing, Affinity, Persistence & Sticky Sessions

2011 14

  1. Microsoft Terminal Server / RemoteApp Load Balancing
  2. Using ALOHA load balancer as a Reverse Proxy (Guide)
  3. Benchmarking SSL performance
  4. Layer 4 load balancing tunnel mode
  5. Layer 4 Load Balancing Direct Server Return Mode
  6. Layer 4 Load Balancing NAT Mode
  7. Send users to the same server for IMAP & SMTP
  8. Send User to the Same Backend for both HTTP & HTTPS
  9. Protect Your Web Server Against Slowloris Attack
  10. Maintain affinity based on SSL session ID
  11. How to play with maxconn to avoid server slowness or crash
  12. Smart Content Switching for a News Website
  13. HAProxy Aloha Layer 7 IPv6 to IPv4 Configuration (Guide)
  14. Layer 4 vs Layer 7 Load Balancing (Differences Explained)