Tag Archives: sni

How to get SSL with HAProxy getting rid of stunnel, stud, nginx or pound

Update: HAProxy can now handle SSL client certificate: SSL Client certificate management at applicationĀ level History HAProxy is well know for its performance as a reverse-proxy and load-balancer and is widely deployed on web platforms where performance matters. It is sometimes … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 65 Comments

HOWTO SSL native in HAProxy

IMPORTANT NOTE: this article has been outdated since HAProxy-1.5-dev12 has been released (10th of September). For more information about SSL inside HAProxy. please read: How to get SSL with HAProxy getting rid of stunnel, stud, nginx orĀ pound Synopsis Since yesterday … Continue reading

Posted in HAProxy, layer7, ssl | Tagged , , , , , , | 28 Comments

Enhanced SSL load-balancing with Server Name Indication (SNI) TLS extension

Synopsis Some time ago, we wrote an article which explained how to load-balance SSL services, maintaining affinity using the SSLID. The main limitation of this kind of architecture is that you must dedicate a public IP address and port per … Continue reading

Posted in architecture, HAProxy, optimization, ssl | Tagged , , , , , | 16 Comments