HAProxy 3.0 Unveils New Era in Load Balancing

This year, Haproxy is celebrating its 23rd anniversary as the fastest and most widely used programmatic loader globally, boasting billions of downloads on Docker Hub. HAPROXY continues to lead in API management, container networks, protection against DDOS attacks, Web Application Firewalls (WAF), and load balancing.

The main changes in Haproxy 3.0:

  • The new CRT-Store section for downloading TLS certificates provides flexible control over the storage and use of SSL certificates. This section replaces CRT-List and allows separate indication of certificate, key, and OCSP answer locations with aliases for easy certificate linking.

  • Restriction of problematic HTTP/2 compounds: Haproxy can now track and limit problematic HTTP/2 requests that may lead to service refusal.

  • GUID Assignment to configuration objects: the new GUID directive assigns unique identifiers to Frontend, Backend, and Listen sections for statistical maintenance after reboot.

  • Syslog load balancing: Syslog messages are enhanced with the ability to set weights on server lines in logistics mode.

  • Logging in JSON and CBOR format: Logs can now be configured in JSON and CBOR formats with keys specified for each field.

  • Improvements to Lua and Stick tables: Enhancements in loading and locking mechanisms significantly boost Lua and Stick STICS performance on systems with a high number of flows.

  • Installation of standard TLS certificates: The new version allows for specifying a standard certificate in cases where no matching certificate is found.

  • http error control: Added directives HTTP-CODES and HTTP-Fail-Codes enable tracking of specific HTTP states.

  • Traffic prioritization: The Differendiated Services (DS) field in IP packets can now be modified for traffic prioritization on both front-end and back-end.

  • Creation of UUIDV7 identifiers: The UUID method now supports UUID 4 and 7 versions, useful for assigning unique identifiers to log entries.

  • Configuration of virtual files ACL and MAP: ACL and Map files can now be virtual, simplifying their use in containerized environments.

Haproxy 3.0 maintains its leadership in software load balancing, offering improvements in usability, performance, reliability, observability, and security. Thanks

/Reports, release notes, official announcements.