Top all-time · #510
HAProxy Technologies
Company blog · haproxy.com/blogprogrammingsystems
HAProxy Technologies is the company blog at haproxy.com, writing about programming and systems. Since 2014, 113 different Hacker News readers have linked it 259 times, most often “The State of SSL Stacks”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.
Simplify, scale, and secure modern applications, APIs, and AI services in any environment. HAProxy Technologies is the company behind HAProxy.
Most-linked posts?
- The State of SSL Stacks11 people · 15 mentions · first linked 2025-05-06
- HAProxy Forwards over 2M HTTP Requests/S on a Single AWS Graviton26 people · 7 mentions · first linked 2021-04-08
- Truly Seamless Reloads with HAProxy6 people · 6 mentions · first linked 2017-05-03
- HAProxy 1.9 Has Arrived4 people · 4 mentions · first linked 2018-12-20
- The GitHub Load Balancer4 people · 4 mentions · first linked 2020-02-24
- Dynamic Configuration with the HAProxy Runtime API3 people · 4 mentions · first linked 2017-12-05
- /blog/route-ssh-connections-with-haproxy3 people · 4 mentions · first linked 2023-12-24
- Guide on configuring hitless reloads/hot restarts in HAProxy3 people · 4 mentions · first linked 2018-05-31
- Extending HAProxy with the Stream Processing Offload Engine3 people · 3 mentions · first linked 2019-04-05
- HAProxy 2.43 people · 3 mentions · first linked 2021-05-14
What Hacker News says?
>What would some good examples of those be? There is haproxy-protection, which I believe is the basis of Kiwiflare. Clients making new connections have to solve a proof-of-work challenge that take about 3 seconds of compute time. Enterprise: https://www.haproxy.com/solutions/ddos-protection-and-rate-l... FOSS: https://gitgud.io/fatchan/haproxy-protection
Comment linking /solutions/ddos-protection-and-rate-limiting
on “Cloudflare outage on November 18, 2025 post mortem”Submitted HAProxy 2.0 as a story · 389 points
HN discussionI run sshd behind the HAProxy https://www.haproxy.com/blog/route-ssh-connections-with-hapr...
Comment linking /blog/route-ssh-connections-with-haproxy
on “RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems”Submitted HAProxy 1.8 as a story · 251 points
HN discussionIn some setups I decided to have jumphost via HAproxy ssl as described there https://www.haproxy.com/blog/route-ssh-connections-with-hapr... so no ssh directly exposed at all.
Comment linking /blog/route-ssh-connections-with-haproxy
on “RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems”Submitted Truly Seamless Reloads with HAProxy as a story · 227 points
HN discussionIt added ACME in 3.2, the DNS challenge is coming next: https://www.haproxy.com/blog/announcing-haproxy-3-2#acme-pro...
Comment linking /blog/announcing-haproxy-3-2
on “Nginx introduces native support for ACME protocol”Submitted Using HAProxy as an API Gateway, Part 1 as a story · 212 points
HN discussion> Thank you. I use most of this, I've been using it for years and I just don't talk about it because it's hard to argue when people just want to force an idea that k8s is "really the best way of doing things". I wouldn't call it the best way; Rather a good way because Kubernetes does encapsulate the really good bits from scalability, development, security and reliability aspect. It's not a panacea but if you have te…
Comment linking /blog/dissecting-the-haproxy-kubernetes-ingress-controller/
on “Container technologies at Coinbase: Why Kubernetes is not part of our stack”Submitted HAProxy 2.4 as a story · 159 points
HN discussionhttps://www.haproxy.com/documentation/aloha/9-5/traffic-mana...
Comment linking /documentation/aloha/9-5/traffic-management/lb-layer7/dns-srv-records/
on ““Let’s use Kubernetes.” Now you have eight problems”Submitted The State of SSL Stacks as a story · 150 points
HN discussionhttps://www.infoq.com https://www.heavybit.com/library/ https://alestic.com https://blog.deepracing.io https://www.haproxy.com/blog/ Podcasts: https://www.stitcher.com/podcast/offerzen-podcast https://www.youtube.com/channel/UCzo_FqWUbEH0AYs0NilUWpA https://podbay.fm/podcast/996111298
Comment linking /blog/
on “Most tech content is bullshit”Submitted Haproxy 2.2 as a story · 132 points
HN discussionI loved Chef after we got familiar with it. It was nice, cute, had solutions for a lot of problems. (foodcritic, kitchen, rubocop, etc.) But it simply is a solution in search of a problem in today's container orchestrator/platform world. HAproxy is amazing, but a k8s Ingress service [0] has a nice API, so I don't have to run Chef to add a new vhost. Yet I can persist the config in a YAML. (Or json, or whatever.) [0]…
Comment linking /blog/haproxy-2-0-and-beyond/
on “How to write idempotent Bash scripts”Submitted The New HAProxy Data Plane API: Two Examples of Programmatic Configuration as a story · 121 points
HN discussionIsn't the first half of this: "use haproxy" (eg: see [1]) (or any other real load balancer)? I'm not sure if the second half is "... And squid or another caching web proxy" - but I'm open to the ssr pipeline being far enough from REST (the architectural pattern) that caching is broken, and something more application level, like redis/memcache or a custom cache is needed. [1] https://www.haproxy.com/blog/four-example…
Comment linking /blog/four-examples-of-haproxy-rate-limiting/
on “Scaling React Server Side Rendering”Submitted Application-Layer DDoS Attack Protection with HAProxy as a story · 119 points
HN discussionHAProxy + DDOS protection? https://www.haproxy.com/blog/application-layer-ddos-attack-p... Or any proof of work proxy that delays the ingress traffic. If you only have one server there is very little you can do except maybe redirect to a static page or kill the DNS entries.
Comment linking /blog/application-layer-ddos-attack-protection-with-haproxy
on “The Internet Archive is under a DDoS attack”Submitted Introduction to HAProxy ACLs as a story · 110 points
HN discussionJust put HAProxy in front of it. It’s not rocket science. https://www.haproxy.com/solutions/microservices.html
Comment linking /solutions/microservices.html
on “How I Took an API Side Project to 250M Daily Requests”Submitted Nearly 90% of our AI crawler traffic is from ByteDance as a story · 95 points
HN discussionThe article mentions sslh which works like httpssh. It also possible to achieve this with haproxy like this: frontend https bind *:443 mode tcp tcp-request inspect-delay 2s use_backend https_loopback if { req.ssl_ver gt 0 } default_backend ssh Another option is to use TLS SNI (Server Name Indication) like a virtualhost-style ssh server ( https://www.haproxy.com/blog/route-ssh-connections-with-hapr... ). You can use…
Comment linking /blog/route-ssh-connections-with-haproxy
on “SSH over HTTPS”Submitted DNS for Service Discovery in HAProxy as a story · 87 points
HN discussionI'm using HAProxy on my 1 machine homelab. I'm not convinced that HTTP/3 a big improvement over HTTP/2, but for me, HTTP/3 was as easy as upgrading and adjusting the config file a little bit. From my perspective, the seeming lack of HTTP/3 support noted in this article is not a big problem. That said, I'm dying to get official 0-rtt support. https://www.haproxy.org/ https://haproxy.debian.net/ https://www.haproxy.co…
Comment linking /blog/announcing-haproxy-2-6
on “HTTP/3 is everywhere but nowhere”Submitted Introduction to HAProxy Stick Tables as a story · 75 points
HN discussionWhen reading along: Keep in mind that I'm not a core developer and thus are not directly involved in development, design decisions, or roadmap. I have some understanding of the internals and the associated challenges based on my contributions and discussions on the mailing list, but the following might not be entirely correct. > I wonder if a disk-writing process could be spun out before dropping privileges? I mean…
Comment linking /de/blog/haproxy-forwards-over-2-million-http-requests-per-second-on-a-single-aws-arm-instance/
on “35M Hot Dogs: Benchmarking Caddy vs. Nginx”Submitted HAProxy 3.0 Released as a story · 53 points
HN discussionIt's not as turn-key as Caddy, that's for sure, but it's there: https://www.haproxy.com/blog/lets-encrypt-acme2-for-haproxy/
Comment linking /blog/lets-encrypt-acme2-for-haproxy/
on “35M Hot Dogs: Benchmarking Caddy vs. Nginx”Submitted Dynamic Configuration with the HAProxy Runtime API as a story · 50 points
HN discussion
