Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Haproxy 2.2

haproxy.com

Post reply on HN
Print view View original

21–30 of 61 posts

Re: Haproxy 2.2

#21

Post by topspin »

lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

I asked for a feature on GitHub (fetching SHA-2 fingerprint of client certificates, as opposed to SHA-1) and it was handled in one day. That was the feature that pulled me away from nginx (which still only provides SHA-1 via $ssl_client_fingerprint btw.)

Re: Haproxy 2.2

#22

Post by lukeqsee »

topspin wrote: post #21
lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

I asked for a feature on GitHub (fetching SHA-2 fingerprint of client certificates, as opposed to SHA-1) and it was handled in one day. That was the feature that pulled me away from nginx (which still only provides SHA-1 via $ssl_client_fingerprint btw.)

Sounds like par for the course.

I compiled it from source on our edge servers for a long time (as opposed to packaged), simply so I could apply these real time patches as needed.

Re: Haproxy 2.2

#23

Post by TimWolla »

topspin wrote: post #21
lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

I asked for a feature on GitHub (fetching SHA-2 fingerprint of client certificates, as opposed to SHA-1) and it was handled in one day. That was the feature that pulled me away from nginx (which still only provides SHA-1 via $ssl_client_fingerprint btw.)

Oh hi! That was me [1]. I'm a community contributor, but I'm equally impressed by the speed patches get merged on the mailing list.

[1] https://github.com/haproxy/haproxy/issues/123#issuecomment-5...

Re: Haproxy 2.2

#24

Post by vbezhenar »

rumanator wrote: post #17
zokier wrote: post #14

Earlier quoted context omitted.

> looks like it was designed in the 90s. I think plenty of HNers will see that as a positive aspect.

I understand the nostalgia or liking the retro look, but the site is completely unreadable in mobile. There is absolutely no redeeming quality in that. Claiming that an unreadable version of a site is better than a readable one is simply wrong.

Some people are using phones to call and computers to browse the Internet.

Re: Haproxy 2.2

#25

Post by apple4ever »

lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

Why do you choose HAProxy over Ngxinx?

It's sounds like you love it, and I have had no experience with HAProxy. So I'm curious about the reasons you love it.

(Just to be clear this is a sincere question to learn since tone is hard to express clearly with text.)

Re: Haproxy 2.2

#26

Post by TimWolla »

apple4ever wrote: post #25
lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

Why do you choose HAProxy over Ngxinx? It's sounds like you love it, and I have had no experience with HAProxy. So I'm curious about the reasons you love it. (Just to be clear this is a sincere question to learn since tone is hard to express clearly with text.)

I gave my reasoning back on the HAProxy 2.0 announcement: https://news.ycombinator.com/item?id=20198232

Re: Haproxy 2.2

#27

Post by lukeqsee »

apple4ever wrote: post #25
lukeqsee wrote: post #18

HAProxy is a unique piece of software. I’ve had the privilege to interact directly with Willy (the main developer for many years, still the project lead) on the mailing list, in person at the conference, and even though I’ve never paid a dime, the interaction has been the best open-source experience I’ve ever had. Willy routinely writes multi-paragraph responses on the mailing list to my hair-brained suggestions for…

Why do you choose HAProxy over Ngxinx? It's sounds like you love it, and I have had no experience with HAProxy. So I'm curious about the reasons you love it. (Just to be clear this is a sincere question to learn since tone is hard to express clearly with text.)

As a load balancer, NGINX is subpar in almost every feature comparison, especially at the open-source (free to use) tier.

HAProxy gives you the following that are musts for load balancing (in my opinion), that NGINX does not, at least not easily:

1) A HTML (or JSON) stats page that precisely and completely tells you what’s going on at a high-level. A visit to this during outages is often all that’s required.

2) Support for DNS (and other) discovery mechanisms in a flexible way. (This is paid in NGINX)

3) Active health checks (also paid in NGINX)

4) The ACL system, while somewhat difficult to learn, is amazingly powerful.

5) Flexible L7 retries are brilliant.

We replaced NGINX with HAProxy and eliminated a whole class of bugs, micro-outages, and annoyances just by following HAProxy’s best practices.

I still use NGINX when I need a static web file server, though. :)

Re: Haproxy 2.2

#28

Post by jwitthuhn »

rumanator wrote: post #17
zokier wrote: post #14

Earlier quoted context omitted.

> looks like it was designed in the 90s. I think plenty of HNers will see that as a positive aspect.

I understand the nostalgia or liking the retro look, but the site is completely unreadable in mobile. There is absolutely no redeeming quality in that. Claiming that an unreadable version of a site is better than a readable one is simply wrong.

I think "unreadable" is a pretty big stretch here. This is what the site looks like for me in firefox on android.

https://i.imgur.com/Zmslysb.jpg

The text in the navigation section and the table is a bit small, but quite far from unreadable. That can also easily be solved by zooming in.

On the topic of mobile, I think it is also very important to look at data usage.

~327KB for all assets on haproxy.org ~5.8MB for all assets on haproxy.com including nearly a megabyte of javascript

Re: Haproxy 2.2

#29

Post by social_quotient »

netcraft wrote: post #19

Slightly OT, we have several different kinds of services that need rate limiting, written in different stacks. We would like to have one solution for rate limiting, ideally that we could put in front of any service, that was light weight, but also could work with AWS target groups that are already splitting traffic across nodes inside a service - so I believe that means some sort of clustered solution or at least com…

We use HAproxy for similar reasons you describe if I’m understanding correctly.

As one of the other posts kinda suggested you can get a ton done with a few hours, it might be worth just standing up a box real quick and trying it out. As a note when we try stuff like this we put behind a AWS LB so we can push partial traffic to our experiment and aren’t betting the farm whilst testing in prod.

Good luck!

Re: Haproxy 2.2

#30

Post by rumanator »

vbezhenar wrote: post #24
rumanator wrote: post #17

Earlier quoted context omitted.

I understand the nostalgia or liking the retro look, but the site is completely unreadable in mobile. There is absolutely no redeeming quality in that. Claiming that an unreadable version of a site is better than a readable one is simply wrong.

Some people are using phones to call and computers to browse the Internet.

What's your point? Are you trying to argue that just because you imagine someone does not have a smartphone then it's ok to fool ourselves to believe that no one has a smartphone?

Because mobile has been a basic requirement and competency for, say, the last decade.

Post reply on HN