Category Archives: Aloha

wordpress CMS brute force protection with HAProxy

Brute force attacks Brute force is a pretty simple type of attacks: it consists of massively send requests to a URL with different parameter each time. The main purpose is to try to find the right parameter combination. Usually, brute … Continue reading

Posted in Aloha, security | Tagged , , , , | Leave a comment

Client IP persistence OR source IP hash load-balancing?

Client or Source IP ??? Well, this is roughly the same! Depends on people, environment, products, etc… I may use both of them in this article, but be aware that both of them points to the IP that is being … Continue reading

Posted in Aloha, architecture, layer4, layer7 | Tagged , , | Leave a comment

Microsoft Remote Desktop Services (RDS) Load-Balancing and protection

RDS, RDP, TSE, remoteapp Whatever you call it, it’s the remote desktop protocol from Microsoft, which has been renamed during the product life. Basically, it allows users to get connected on remote server and run an application or a full … Continue reading

Posted in Aloha, architecture, security, Virtual Desktop Infrastructure | Tagged , , , | 4 Comments

IIS 6.0 appsession cookie and PCI compliance

Synopsis You’re using HAProxy or the ALOHA Load-Balancer to load-balance IIS 6.0 web applications and you want them to pass successfully PCI compliance test. One of the pre-requisite is to force the cookie to be “HttpOnly”, in order to tell … Continue reading

Posted in Aloha, HAProxy, layer7, security | Tagged , , , | Leave a comment

SSL offloading impact on web applications

SSL Offloading Nowadays, it is common (and convenient) to use the Load-Balancer SSL capabilities to cypher/uncypher traffic from clients to the web application platform. Performing SSL at the Load-Balancer Layer is called “SSL offloading“, because you offload this process from … Continue reading

Posted in Aloha, architecture, ssl, HAProxy | Tagged , , , | 4 Comments