Live data from Hacker News

HAProxy 1.5 supports SSL offloading and downstream encryption

blog.exceliance.fr

11–18 of 18 posts

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#11
I can not build it in Fedora (both 12 and 16). Ubuntu is fine.

"include/proto/proto_http.h" defined "error_message", this is in conflict with the "error_message" already defined in "et/com_err.h", which is included by "krb5/krb5.h", which itself is included by "openssl/kssl.h", which included by "openssl/ssl.h"

Where do I submit a bug report? Couldn't find the link on haproxy site.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#12
Can anyone tell me how HAProxy compares to Varnish? I've used the latter and swear by it, but I've never used HAProxy. Is it as amazingly fast at caching as Varnish is?

Right now I do nginx (for SSL) -> Varnish (caching) -> nginx (static media/proxying) -> gunicorn (Django). I'd love to remove many of those parts.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#13
post #9

Earlier quoted context omitted.

Why is haproxy reloading an issue ? It works pretty well in my experience (although I am not in the web business anymore, so things may have changed in the last two years).

Reloading is no issue when you have few frontends or backends. But when you have a lot of front- or backends, the configuration file will be huge, and reloading will take some time. If you need to reload every few seconds, this might even cause downtime. But I guess our workload is not the usual implementation of HAProxy...

"But when you have a lot of front- or backends, the configuration file will be huge, and reloading will take some time. If you need to reload every few seconds..."

Uh, yeah, I suspect your workload is unusual.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#14

Can anyone tell me how HAProxy compares to Varnish? I've used the latter and swear by it, but I've never used HAProxy. Is it as amazingly fast at caching as Varnish is? Right now I do nginx (for SSL) -> Varnish (caching) -> nginx (static media/proxying) -> gunicorn (Django). I'd love to remove many of those parts.

Last I heard, HAProxy does not perform any caching. I agree that fewer components in the stack would be an improvement, but we seem to be in the minority.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#15
post #4

I wonder if it supports SNI for virtual SSL hosts?

+1 If it did, that'd be really, really helpful. The spec is pretty simple, I don't know why SSL implementations leave it off. :(

Because Windows XP doesn't support SNI, so not many people use it. That's my theory.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#16

Can anyone tell me how HAProxy compares to Varnish? I've used the latter and swear by it, but I've never used HAProxy. Is it as amazingly fast at caching as Varnish is? Right now I do nginx (for SSL) -> Varnish (caching) -> nginx (static media/proxying) -> gunicorn (Django). I'd love to remove many of those parts.

see the official haproxy blog about it: [1] and [2]. i think it's a valid comparison. but as i said in my submission of the first of these articles, there are some (minor) mistakes.

[1] http://blog.exceliance.fr/2012/07/04/haproxy-and-varnish-com...

[2] http://blog.exceliance.fr/2012/08/25/haproxy-varnish-and-the...

[3] https://news.ycombinator.com/item?id=4198339

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#17
post #14

Can anyone tell me how HAProxy compares to Varnish? I've used the latter and swear by it, but I've never used HAProxy. Is it as amazingly fast at caching as Varnish is? Right now I do nginx (for SSL) -> Varnish (caching) -> nginx (static media/proxying) -> gunicorn (Django). I'd love to remove many of those parts.

Last I heard, HAProxy does not perform any caching. I agree that fewer components in the stack would be an improvement, but we seem to be in the minority.

you are part of a vocal minority. there is a reason though for the unixy model of operation with more (well-defined as proxys usually are) smaller components.

Re: HAProxy 1.5 supports SSL offloading and downstream encryption

#18

I can not build it in Fedora (both 12 and 16). Ubuntu is fine. "include/proto/proto_http.h" defined "error_message", this is in conflict with the "error_message" already defined in "et/com_err.h", which is included by "krb5/krb5.h", which itself is included by "openssl/kssl.h", which included by "openssl/ssl.h" Where do I submit a bug report? Couldn't find the link on haproxy site.

just use the software-engineering 2.0 way (vc but not github) and send a mail to their mailing list: haproxy@formilux.org
Post reply on HN