Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

HAProxy 2.0

haproxy.com

Post reply on HN
Print view View original

31–40 of 120 posts

Re: HAProxy 2.0

#31

Post by nickramirez »

platform wrote: post #29
nickramirez wrote: post #20

Earlier quoted context omitted.

What open-source NGINX lacks that open-source HAProxy has: * ACL rules with full support for logical if statements [1] * active health checks * end-to-end HTTP/2 [2] * Robust logging or a dashboard with metrics * The ability to read env variables * session stickiness * DNS service discovery [3] These are just things I'm aware of, there could be a lot more. HAProxy has shown itself to perform better for certain users…

WRT > end-to-end HTTP/2 [2] I think this is supported. We are using NGINX with its core Stream module to receive HTTP/2 encrypted traffic, and loadbalance it (with random or least_conn) algorithms -- to each of our backends. Traffic stays encrypted end-to-end, and it remains HTTP/2 (because the Stream module works at TCP level, not http so it does not care http/2 or http/1 is used). It seems that in the ticket [2] th…

HAProxy can proxy HTTP/2 at Layer 4 or at Layer 7, to get all the HTTP message data and perform routing based on that, etc.

Re: HAProxy 2.0

#32

Post by rogerdonut »

morrbo wrote: post #27

Is the v1 config backwards compatible with this? I can't see it mentioned anywhere so assume you can just upgrade in place?

Yes, the same configuration should work between both. Although some options are no longer required to be set such as nbproc/nbthread. To be safe pass it through the configuration checker (-c on the command line).

Re: HAProxy 2.0

#33

Post by nickramirez »

kawsper wrote: post #28
synack wrote: post #22

This is a list of nearly every feature I've ever wanted from haproxy. Truly wonderful work!

Same here, except for a Consul integration, so we didn't have to rely on SRV-records, but I guess you can't have everything :)

With the Data Plane API, expect to see tighter integration with Consul. For now, there is this integration https://www.haproxy.com/blog/building-a-service-mesh-with-ha...

Re: HAProxy 2.0

#35

Post by jrockway »

Sounds like HAProxy 2.0 is Envoy. I would personally (and do) just use Envoy, as everyone else is already using it and the bugs they've found have been fixed.

Re: HAProxy 2.0

#36

Post by linsomniac »

smueller1234 wrote: post #11
johnramsden wrote: post #2

I've always used Nginx as a proxy, but I've seen HAProxy mentioned, what are some of the benefits of using HAProxy over nginx as a proxy or load balancer?

I'll let others comment on the technical differences. Have you read The Maglev paper out of Google? At the time right before that was published, one of my engineers was implementing much the same thing. They considered both HAProxy and nginx for the second layer of load balancing. The were technical reasons in either direction. There was some pressure (from me) to go with nginx because we were already using it as our…

I also had a great experience with HA Proxy open source support. We had some sort of config problem when we enabled H2 (IIRC, maybe it was going to 1.8 from 1.7). I did a bunch of testing of it, documented what I found and where I found it acting funny, and posted to the haproxy mailing list. A dev replied with something like "Sounds like you have this config option set wrong". Problem solved!

We had bought a ton of Fortinet gear to firewall+load balance for us, but in the end could never quite get it deployed. I got the haproxy set up instead and it's been amazing!

Re: HAProxy 2.0

#37

Post by crankylinuxuser »

nickramirez wrote: post #20
johnramsden wrote: post #2

I've always used Nginx as a proxy, but I've seen HAProxy mentioned, what are some of the benefits of using HAProxy over nginx as a proxy or load balancer?

What open-source NGINX lacks that open-source HAProxy has: * ACL rules with full support for logical if statements [1] * active health checks * end-to-end HTTP/2 [2] * Robust logging or a dashboard with metrics * The ability to read env variables * session stickiness * DNS service discovery [3] These are just things I'm aware of, there could be a lot more. HAProxy has shown itself to perform better for certain users…

> * ACL rules with full support for logical if statements [1]

That is a terrifying "feature".

Turing completeness is not a feature. That "feature" allows complete emulation of other computation types.. Including an infinite ways of doing something wrong or bad.

Re: HAProxy 2.0

#39

Post by no_wizard »

The conversation in this thread has made me wonder after reading it if anyone uses Apache2 as their webserver anymore.

Edit: seems many still do! I thought it was dying slowly as php popularity was going down.

Post reply on HN