HAProxy 2.0 • Hacker News Board

Re: HAProxy 2.0

#21

Post by johnchristopher » Sun, Jun 16, 2019, 10:24 PM UTC

Some months ago I decided to move every little things running on some VPS to docker (so I could move those apps at will and have apps with incompatible dependencies running on the same VPS).

I looked into Haproxy, set a bunch of rules and fall into static IP management hell. Then I tried Traefik mainly because of the HTTPS auto-renewal feature but the ability to tag docker containers with DNS regex (so traefik knows how to reverse proxy traffic) is a god send.

Is there something like that in HaProxy 2.0 (HTTPS auto-renewal and container tagging) ?

Re: HAProxy 2.0

#22

Post by synack » Sun, Jun 16, 2019, 10:24 PM UTC

This is a list of nearly every feature I've ever wanted from haproxy. Truly wonderful work!

Re: HAProxy 2.0

#23

Post by flas9sd » Sun, Jun 16, 2019, 10:33 PM UTC

johnramsden wrote: post #2

I've always used Nginx as a proxy, but I've seen HAProxy mentioned, what are some of the benefits of using HAProxy over nginx as a proxy or load balancer?

haproxys config format is concise and approachable. I like the cbonte single-page html doc page where ctrl+f to elaborate explanations can go a long way clearing up (mis)understandings.

Re: HAProxy 2.0

#24

Post by theturtletalks » Sun, Jun 16, 2019, 10:46 PM UTC

johnchristopher wrote: post #21

Some months ago I decided to move every little things running on some VPS to docker (so I could move those apps at will and have apps with incompatible dependencies running on the same VPS). I looked into Haproxy, set a bunch of rules and fall into static IP management hell. Then I tried Traefik mainly because of the HTTPS auto-renewal feature but the ability to tag docker containers with DNS regex (so traefik knows…

I would check out https://github.com/caprover/caprover. You can run multiple apps on 1 VPS and HTTPS renewal is automatic.

Re: HAProxy 2.0

#25

Post by jaytaylor » Sun, Jun 16, 2019, 10:48 PM UTC

Does it have proper support for HTTP/2.0?

Last I checked, only Nginx really did it right.

Re: HAProxy 2.0

#26

Post by paulddraper » Sun, Jun 16, 2019, 10:52 PM UTC

jaytaylor wrote: post #25

Does it have proper support for HTTP/2.0? Last I checked, only Nginx really did it right.

HTTP/2 support was added in 1.8, at the beginning of last year.

AFAIK it's solid.

Re: HAProxy 2.0

#27

Post by morrbo » Sun, Jun 16, 2019, 11:14 PM UTC

Is the v1 config backwards compatible with this? I can't see it mentioned anywhere so assume you can just upgrade in place?

Re: HAProxy 2.0

#28

Post by kawsper » Sun, Jun 16, 2019, 11:17 PM UTC

synack wrote: post #22

This is a list of nearly every feature I've ever wanted from haproxy. Truly wonderful work!

Same here, except for a Consul integration, so we didn't have to rely on SRV-records, but I guess you can't have everything :)

Re: HAProxy 2.0

#29

Post by platform » Sun, Jun 16, 2019, 11:20 PM UTC

nickramirez wrote: post #20

johnramsden wrote: post #2

I've always used Nginx as a proxy, but I've seen HAProxy mentioned, what are some of the benefits of using HAProxy over nginx as a proxy or load balancer?

What open-source NGINX lacks that open-source HAProxy has: * ACL rules with full support for logical if statements [1] * active health checks * end-to-end HTTP/2 [2] * Robust logging or a dashboard with metrics * The ability to read env variables * session stickiness * DNS service discovery [3] These are just things I'm aware of, there could be a lot more. HAProxy has shown itself to perform better for certain users…

WRT > end-to-end HTTP/2 [2]

I think this is supported.

We are using NGINX with its core Stream module to receive HTTP/2 encrypted traffic, and loadbalance it (with random or least_conn) algorithms -- to each of our backends.

Traffic stays encrypted end-to-end, and it remains HTTP/2 (because the Stream module works at TCP level, not http so it does not care http/2 or http/1 is used).

It seems that in the ticket [2] that you mentioned, the commenter at the end is asking exactly for this. And that works well.

It is called often 'pass-through proxy'. The article here explains how to set it up

https://serversforhackers.com/c/tcp-load-balancing-with-ngin...

We loose information about the Web-browser's IP address at our backend. For for privacy-enforcement reasons, we actually do not want to have it at our terminating points (our backend apis). And also, if we ever need it -- I thin this can be enabled with the proxy protocol.

Re: HAProxy 2.0

#30

Post by TimWolla » Sun, Jun 16, 2019, 11:23 PM UTC

morrbo wrote: post #27

Is the v1 config backwards compatible with this? I can't see it mentioned anywhere so assume you can just upgrade in place?

Apart from a few new warnings for long-deprecated options it is compatible. HAProxy 2.0 is not a major version. Willy apparently just dislikes two-digit versions in the second place.