from Hacker News

HAProxy 1.5 supports SSL offloading and downstream encryption

by bastichelaar on 9/4/12, 1:00 PM with 17 comments

• by deweller on 9/4/12, 1:39 PM

  I'm so glad to see that haproxy is finally adding native SSL support.

  I have used stunnel (http://www.stunnel.org/) in front of HAProxy up to now. That setup works. But I'm happy that in the future I can remove one of the moving parts from my machine and just use haproxy.

• by bastichelaar on 9/4/12, 3:41 PM

  What I would like to see is a way to change the HAProxy configuration on the fly, or something like a configuration backend. That would avoid reloading HAProxy after each config change, and allow a much more flexible configuration.

• by wensheng on 9/4/12, 5:26 PM

  I can not build it in Fedora (both 12 and 16). Ubuntu is fine.

  "include/proto/proto_http.h" defined "error_message", this is in conflict with the "error_message" already defined in "et/com_err.h", which is included by "krb5/krb5.h", which itself is included by "openssl/kssl.h", which included by "openssl/ssl.h"

  Where do I submit a bug report? Couldn't find the link on haproxy site.

• by kennu on 9/4/12, 2:31 PM

  I wonder if it supports SNI for virtual SSL hosts?

• by StavrosK on 9/4/12, 5:53 PM

  Can anyone tell me how HAProxy compares to Varnish? I've used the latter and swear by it, but I've never used HAProxy. Is it as amazingly fast at caching as Varnish is?

  Right now I do nginx (for SSL) -> Varnish (caching) -> nginx (static media/proxying) -> gunicorn (Django). I'd love to remove many of those parts.

• by bsenftner on 9/4/12, 3:03 PM

  This is great, exactly when I need it.

• by skyebook on 9/4/12, 1:59 PM

  Great to see another hole in secure connections being plugged.