by johnramsden on 6/16/19, 9:55 PM
I've always used Nginx as a proxy, but I've seen HAProxy mentioned, what are some of the benefits of using HAProxy over nginx as a proxy or load balancer?
by crb on 6/16/19, 11:39 PM
Thoughts on HAProxy vs. Envoy, or as the data plane for a service mesh?
by ricardbejarano on 6/17/19, 6:00 AM
PSA: if you are building your own HAProxy binaries, 2.0 replaces the confusing linux `TARGET`s (`linux2628` and the like) with a single target "`linux-glibc`", that name may be even more confusing, as that's the target you need to build HAProxy even if you are using musl instead of glibc.
by synack on 6/16/19, 10:24 PM
This is a list of nearly every feature I've ever wanted from haproxy. Truly wonderful work!
by no_wizard on 6/17/19, 12:36 AM
The conversation in this thread has made me wonder after reading it if anyone uses Apache2 as their webserver anymore.
Edit: seems many still do! I thought it was dying slowly as php popularity was going down.
by thecodemonkey on 6/16/19, 10:20 PM
Proper Layer 7 retrying is huge. I’ve been waiting for this for a while.
by morrbo on 6/16/19, 11:14 PM
Is the v1 config backwards compatible with this? I can't see it mentioned anywhere so assume you can just upgrade in place?
by exabrial on 6/17/19, 2:12 PM
Now that HaProxy uses HTX internally to quickly represent header flags, I wish they'd add that to their "Proxy Protocol". Back in the day, Apache/Tomcat used AJP to transmit parsed HTTP state to backend servers to avoid the re-parsing overhead.
by snvzz on 6/17/19, 1:50 AM
by johnchristopher on 6/16/19, 10:24 PM
Some months ago I decided to move every little things running on some VPS to docker (so I could move those apps at will and have apps with incompatible dependencies running on the same VPS).
I looked into Haproxy, set a bunch of rules and fall into static IP management hell. Then I tried Traefik mainly because of the HTTPS auto-renewal feature but the ability to tag docker containers with DNS regex (so traefik knows how to reverse proxy traffic) is a god send.
Is there something like that in HaProxy 2.0 (HTTPS auto-renewal and container tagging) ?
by zeeZ on 6/17/19, 5:52 AM
If I were to use it as a k8s ingress, how would I do OCSP stapling? nginx does that for you, but with haproxy you've always had to hack something together to add a .ocsp file (which has to exist at startup) and reload externally.
I also see no option for client certificate auth or TLS versions and cipher suites in the repo.
I guess it's still better to handle TLS outside of haproxy.
by sansnomme on 6/17/19, 3:44 AM
Are there any programmble http proxy servers? I write a fair bit of VM/container control software and often need to map URLs to specific entities on the network dynamically. Never found a good programmable proxy with routing table API and always had to hand roll.
by xmichael999 on 6/17/19, 3:08 AM
Such a great project! I was a squid guy, then nginx and now since nginx stopped getting new features due to the commercial edition I am switching. Thank you developers for this amazing work!
by jaytaylor on 6/16/19, 10:48 PM
Does it have proper support for HTTP/2.0?
Last I checked, only Nginx really did it right.
by humbleMouse on 6/17/19, 12:31 AM
Can HA proxy serve static files like nginx?
by jrockway on 6/16/19, 11:44 PM
Sounds like HAProxy 2.0 is Envoy. I would personally (and do) just use Envoy, as everyone else is already using it and the bugs they've found have been fixed.