Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

HAProxy 1.8.0

mail-archive.com

Post reply on HN
Print view View original

11–20 of 24 posts

Re: HAProxy 1.8.0

#11

Post by sams99 »

fermuch wrote: post #4
ssijak wrote: post #2

Do people really announce new releases just over email and things like mail-archive or? Those mail archives always looked strange to me for some unknown reason.

If there is a mailing list for the software, why not send releases information over there? It makes a lot of sense to me. I'm also subscribed to several, and some software also announce patches or security related stuff on mail lists. I see mail as a low barrier of entry (every developer has an email address). What else would you use to notify interested people and be able to receive feedback at the same time?

Sure I think it makes sense to have this on the forum as well as a shadow post or something, I posted this https://discourse.haproxy.org/t/haproxy-1-8-officially-relea... will see if willy would like to keep this and perhaps create an announcemet category. Ultimately his call, but there has been a lot of 1.8 discussion on the forum lately.

Re: HAProxy 1.8.0

#12

Post by bbeausej »

I really am amazed at the stability and quality of the HAProxy project and that since it's inception many , many years ago.

We use it on many of our projects and it has always been a very reliable piece of software, even at high traffic.

Kudos Willy and team, congratulations on the release!

-b

Re: HAProxy 1.8.0

#13

Post by JeanMarcS »

Great ! I'm using it since 1.4 on projects that are reliable because of it. It's a great software.

Now I know what my week R&D time will be : HTTP2 in HAProxy !

Re: HAProxy 1.8.0

#14

Post by ci5er »

ssijak wrote: post #2

Do people really announce new releases just over email and things like mail-archive or? Those mail archives always looked strange to me for some unknown reason.

How else would they do it?

Re: HAProxy 1.8.0

#15

Post by navinsylvester »

bbeausej wrote: post #12

I really am amazed at the stability and quality of the HAProxy project and that since it's inception many , many years ago. We use it on many of our projects and it has always been a very reliable piece of software, even at high traffic. Kudos Willy and team, congratulations on the release! -b

Totally agree. Want to show the appreciation in beers. I wish there are options other than paypal.

Re: HAProxy 1.8.0

#16

Post by zaarn »

I do hope that HAProxy might support ACME at some point, I'm currently stuck on Traefik which has been breaking some traffic but I rely heavily on dynamically issued LE certs.

Otherwise, outside of SSL, HAProxy has been very pleasant in my experience.

Re: HAProxy 1.8.0

#17

Post by mschuster91 »

zaarn wrote: post #16

I do hope that HAProxy might support ACME at some point, I'm currently stuck on Traefik which has been breaking some traffic but I rely heavily on dynamically issued LE certs. Otherwise, outside of SSL, HAProxy has been very pleasant in my experience.

Where's your problem? Spin up a certbot docker container and use this here in haproxy:

    frontend http_in
      bind *:80
      bind *:443 ssl crt /path/to/letsencrypt/data/mydomain.pem
      acl path_letsencrypt path_beg /.well-known/acme-challenge
      use_backend letsencrypt if path_letsencrypt
    backend letsencrypt
      mode http
      server server-letsencrypt MYLOCALIP:8080
For the letsencrypt docker image, I use mesosphere/letsencrypt-dcos with a patched run.sh that triggers a docker kill -s HUP on the haproxy container.

Re: HAProxy 1.8.0

#18

Post by zaarn »

mschuster91 wrote: post #17
zaarn wrote: post #16

I do hope that HAProxy might support ACME at some point, I'm currently stuck on Traefik which has been breaking some traffic but I rely heavily on dynamically issued LE certs. Otherwise, outside of SSL, HAProxy has been very pleasant in my experience.

Where's your problem? Spin up a certbot docker container and use this here in haproxy: frontend http_in bind *:80 bind *:443 ssl crt /path/to/letsencrypt/data/mydomain.pem acl path_letsencrypt path_beg /.well-known/acme-challenge use_backend letsencrypt if path_letsencrypt backend letsencrypt mode http server server-letsencrypt MYLOCALIP:8080 For the letsencrypt docker image, I use mesosphere/letsencrypt-dcos with a…

My problem is usually that I rely heavily on traefik being able to very easily issue certificates simply by having a backend with a hostname present.

If I, for example, configure my PHP VM to be reachable over "test.example.org" in Traefik, then Traefik will automatically try to issue a certificate for this domain once it detects the config change.

On HAProxy this is not as easy as I need to tell both LE and HAP about the new backend.

If it was integrated, I would only have to tell HAP.

Re: HAProxy 1.8.0

#19

Post by tuyguntn »

zaarn wrote: post #16

I do hope that HAProxy might support ACME at some point, I'm currently stuck on Traefik which has been breaking some traffic but I rely heavily on dynamically issued LE certs. Otherwise, outside of SSL, HAProxy has been very pleasant in my experience.

Can you share your experience with Traefik? We also wanted to integrate it into our stack. What problems do you have? How it scales?

Re: HAProxy 1.8.0

#20

Post by zaarn »

tuyguntn wrote: post #19
zaarn wrote: post #16

I do hope that HAProxy might support ACME at some point, I'm currently stuck on Traefik which has been breaking some traffic but I rely heavily on dynamically issued LE certs. Otherwise, outside of SSL, HAProxy has been very pleasant in my experience.

Can you share your experience with Traefik? We also wanted to integrate it into our stack. What problems do you have? How it scales?

My major problem with Traefik is that if you aren't using the defined stacks and opt for file configuration it can be a bit exhausting to configure, TOML is a rather repetitive format.

It also lacks support for HTTP streaming for non-standard HTTP (I wish there was an option to just enable streaming on a host) which sucks for some enterprise software, and streaming for entire hosts so my nextcloud instance always has to wait for the traefik host to buffer the response before being able to download the file to the browser.

However, in terms of scaling and being able to get a SSL-terminating or SSL-handover reverse proxy going it's a breeze and it handles decent load very well.

Post reply on HN