Category Archives: layer7

SSL Client certificate management at application level

HAProxy and SSL The history of SSL in HAProxy is very short: around one month ago, we announced the ability for HAProxy to offload SSL from the servers. HAProxy SSL stack comes with some advanced features like TLS extension SNI. … Continue reading

Posted in Aloha, architecture, HAProxy, layer7, security, ssl | Tagged , , , , , , | 17 Comments

Application Delivery Controller and ecommerce websites

Synopsis Today, almost any ecommerce website uses a load-balancer or an application delivery controller in front of it, in order to improve its availability and reliability. In today’s article, I’ll explain how we can take advantage of ADCs’ layer 7 … Continue reading

Posted in Aloha, architecture, HAProxy, layer7, performance | Tagged , , , , , | 1 Comment

How to get SSL with HAProxy getting rid of stunnel, stud, nginx or pound

Update: HAProxy can now handle SSL client certificate: SSL Client certificate management at application level History HAProxy is well know for its performance as a reverse-proxy and load-balancer and is widely deployed on web platforms where performance matters. It is sometimes … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 53 Comments

HOWTO SSL native in HAProxy

IMPORTANT NOTE: this article has been outdated since HAProxy-1.5-dev12 has been released (10th of September). For more information about SSL inside HAProxy. please read: How to get SSL with HAProxy getting rid of stunnel, stud, nginx or pound Synopsis Since yesterday … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 22 Comments

HTTP request flood mitigation

In a recent article, we saw how we can use a load-balancer as a first row of defense against DDOS. The purpose of the present article to provide a configuration to protect your applications against HTTP request flood. The configuration … Continue reading

Posted in Aloha, HAProxy, layer7, security | Tagged , , , | 4 Comments