HAProxy Technologies @HAProxy

HAProxy 3.4 is out now! 🎉 This is a milestone release that advances all four pillars of what makes HAProxy the world's most trusted software load balancer: flexibility, performance, security, and reliability. These powerful capabilities further solidify HAProxy's lead in G2 categories in Load Balancing, API Management, Container Networking, DDoS Protection, and Web Application Firewall (WAF). The full release announcement covers every enhancement in detail, including dynamic backend config examples, ACME setup, CPU topology tuning, and more. Read it here: hubs.la/Q04jXlCs0

Every signature-based WAF has the same blind spot: the gap between when a vulnerability is disclosed and when a rule is written to block it. For sophisticated attackers, that window is an opportunity. HAProxy Enterprise WAF was engineered from the ground up without reliance on conventional attack signatures. When proof-of-concept exploits surfaced, we tested multiple public and in-house variants against it. Each one was blocked without a single rule update. Read more about the vulnerability in Drupal, and how HAProxy Enterprise WAF offers zero-day protection:: hubs.ly/Q04jM8B10

Public sector agencies running F5 face rising costs, rigid infrastructure, and renewal cycles that strain fixed budgets. Our live session on switching to HAProxy One is built for teams asking what comes next. No slides, no pitch. Just a personalized approach with direct answers from our experts. Register now: hubs.la/Q04jwCSP0

When Austin Ellsworth from @WellerTruck took the stage at HAProxyConf, he did something most infrastructure teams would never attempt: triggered a live failover in production, in front of an audience. With their VDI servers disconnected, HAProxy Enterprise detected the failure instantly, traffic shifted to the secondary data center in under a second, and users reconnected to their Horizon environment without noticing a thing. Find out how they did it: haproxy.com/blog/subsecond…

If your agency is also looking to move away from F5, Jakub Suchy and Ron Northcutt are running a live session for exactly that conversation, with real answers to your specific migration questions in real time. Register here: haproxy.com/content-librar…

Public sector agencies face a unique set of pressures: fixed budgets, aging infrastructure, growing cybersecurity threats, and a mandate to modernize all at once. HAProxy One removes that pressure and provides agencies cost-effective application delivery and security, deployable anywhere: on-premises, air-gapped, or in the cloud, with no vendor lock-in. Find out more: hubs.la/Q04jb3NL0

Zero trust means no user, app, or service is trusted by default — inside or outside the network. In a multi-cloud world with no defined perimeter, that's not a philosophy. It's a practical necessity. HAProxy supports zero-trust security across WAF, mTLS, RBAC, rate limiting, and more. Read the full breakdown here: hubs.la/Q04j0q370

When your infrastructure moves faster than your config files can keep up with, the HAProxy Data Plane API is the missing piece. Join Ron Northcutt on May 28th for a live session with live demos, practical automation patterns, and a clear framework for when to reach for the API. Register here: hubs.la/Q04hS_G20

If you're in London and working in or around Kubernetes, containers, or cloud-native infrastructure, June 3rd is worth putting in the calendar. Cloud Native London brings together the kind of people who actually build things, hold genuine talks, and the practical conversations tend to reflect that. There'll also be pizza, which never hurts! Come find the HAProxy team on the night. We'd love to talk infrastructure, swap stories, or just catch up over a slice. 🍕

What if you could take your data center recovery window from four hours to under a second? This was the reality for @WellerTruck , the largest heavy-duty truck parts remanufacturer in North America. Austin Ellsworth, Infrastructure Manager at Weller, had one goal: infrastructure should never get in the way of the business. Read how building on HAProxy One helped Weller eliminate their four-hour recovery window entirely. haproxy.com/blog/subsecond…

Meet Nick Leger, our new GTM Operations Specialist! 🎉 Nick brings a rare combination of hands-on sales experience and development skills to the team. And after just three months in, he's already making his mark. We're glad to have him and excited to see what we build together! 🔧

@netdev01 Our pleasure, as always! 🫡

On May 20th, proof-of-concept exploits for a critical Drupal SQL injection vulnerability hit GitHub just hours after disclosure. Signature-based WAFs are reactive by design and every new vulnerability is a gap until a rule closes it. HAProxy Enterprise WAF detects malicious behavior at the request level, so when a zero-day surfaces, teams running it have no gap to close and nothing to update. Protection is already there. Read more about the vulnerability in Drupal, and how HAProxy Enterprise WAF offers zero-day protection: hubs.la/Q04htRNM0

What started as a standalone reverse proxy in 2001 has grown into a fully programmable application delivery and security platform, trusted by some of the most demanding organizations in the world. Read about the 25+ years of evolution of HAProxy, the principles behind it, and what they mean for the companies building on it today: hubs.la/Q04h5Knh0

The infrastructure decisions that made sense five years ago aren't aging well. Costs are harder to justify. Vendor trust has eroded. And architectural constraints are limiting how fast teams can move. Partners like PayPal, LinkedIn, and Dartmouth didn't wait for it to become a crisis. They made a deliberate decision to regain control and built on HAProxy to do it. If your team is at that same inflection point, @jakubsuchy and Ron Northcutt are running a live office hours session for exactly that conversation. Small group. No recording. Sign up here: haproxy.com/content-librar…

No olvides inscribirte para la sesión de mañana. Únete a nuestra sesión de preguntas y respuestas en vivo (sin grabación) para descubrir cómo las organizaciones líderes están reduciendo el costo total de propiedad (TCO) hasta en un 90 %. No solo hablaremos de costos, sino que también te mostraremos la hoja de ruta técnica para una transición fluida que ofrece una escalabilidad masiva y seguridad de última generación. Regístrate ahora: haproxy.com/content-librar…

Certificate validity periods are getting shorter and proposals are already in motion to reduce them to as little as 47 days. Manual renewal workflows are not going to scale with that pace. The ACME protocol automates the full certificate lifecycle, from domain validation to issuance and revocation, with no custom scripts or manual intervention. And HAProxy supports it natively from version 3.2 onward. Read more: hubs.la/Q04gP2bT0

At 23 million requests per second, CPU efficiency is a crucial capacity decision. @criteo 's SRE, Basha Mougamadou, knows this better than most. HAProxy's auto-computed CPU policy reduced context switching by 20%, freeing up meaningful CPU headroom for actual request traffic. Read more: haproxy.com/blog/how-crite…

The ACME protocol was built to take operational burdens, such as managing hundreds or thousands of TLS certificates manually, off your plate entirely. By automating certificate issuance, renewal, and revocation at the proxy layer, teams get a single, consistent approach to certificate management across every application. HAProxy 3.2 and HAProxy Enterprise 3.2 introduced native ACME support, with two challenge types available: HTTP-01 for domain verification via a well-known URL path, and DNS-01 for teams that need wildcard certificates or cannot expose HTTP endpoints. From HAProxy 3.3 onward, certificate saving is fully automated through event notifications and the HAProxy Data Plane API — no manual Runtime API calls required. Read the full configuration walkthrough: hubs.la/Q04gNcMp0