Category Archives: layer7

Microsoft Exchange 2013 architectures

Introduction to Microsoft Exchange 2013 There are 2 types of server in Exchange 2013:   * Mailbox server   * Client Access server Definitions from Microsoft Technet website:   * The Client Access server provides authentication, limited redirection, and proxy services, and offers … Continue reading

Posted in Aloha, architecture, exchange, Exchange 2013, layer4, layer7 | Tagged , , , , , , | 5 Comments

Exchange Outlook Web Access (OWA) Cross-Site Request Forgery (CSRF) protection

Outlook Web Access Outlook Web Access is the webmail embedded in Exchange mail server. It is used by users outside the office to get access to their emails. Unfortunately, some version of OWA are affected by a CSRF attack. This … Continue reading

Posted in Aloha, exchange, layer7, security | Tagged , , , | 2 Comments

HAProxy log customization

Synopsis One of the strength of HAProxy is its logging system. It is very verbose and provides many information. HAProxy HTTP log line is briefly explained in an HAProxy Technologies memo. It’s a must have document when you have to … Continue reading

Posted in HAProxy, layer7, performance | Tagged , , , , , , | 3 Comments

SSL Client certificate management at application level

HAProxy and SSL The history of SSL in HAProxy is very short: around one month ago, we announced the ability for HAProxy to offload SSL from the servers. HAProxy SSL stack comes with some advanced features like TLS extension SNI. … Continue reading

Posted in Aloha, architecture, HAProxy, layer7, security, ssl | Tagged , , , , , , | 22 Comments

Application Delivery Controller and ecommerce websites

Synopsis Today, almost any ecommerce website uses a load-balancer or an application delivery controller in front of it, in order to improve its availability and reliability. In today’s article, I’ll explain how we can take advantage of ADCs’ layer 7 … Continue reading

Posted in Aloha, architecture, HAProxy, layer7, performance | Tagged , , , , , | 1 Comment

How to get SSL with HAProxy getting rid of stunnel, stud, nginx or pound

Update: HAProxy can now handle SSL client certificate: SSL Client certificate management at applicationĀ level History HAProxy is well know for its performance as a reverse-proxy and load-balancer and is widely deployed on web platforms where performance matters. It is sometimes … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 65 Comments

HOWTO SSL native in HAProxy

IMPORTANT NOTE: this article has been outdated since HAProxy-1.5-dev12 has been released (10th of September). For more information about SSL inside HAProxy. please read: How to get SSL with HAProxy getting rid of stunnel, stud, nginx orĀ pound Synopsis Since yesterday … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 28 Comments