Latest versions
Branch | Release date | End of life | Latest version | Changelog | Links |
2.3-dev | ~2020-Q4 | 2022-Q2 (dev » stable) | 2.3-dev7 | 2020/10/17 | git / web / dir / announce |
2.2 | 2020-07-07 | 2025-Q2 (LTS) | 2.2.4 | 2020/09/30 | git / web / dir / announce / bugs |
2.1 | 2019-11-25 | 2021-Q1 | 2.1.9 | 2020/09/30 | git / web / dir / announce / bugs |
2.0 | 2019-06-16 | 2024-Q2 (LTS) | 2.0.18 | 2020/09/30 | git / web / dir / announce / bugs |
1.9 | 2018-12-19 | 2020-Q2 (unmaintained) | 1.9.16 | 2020/07/31 | git / web / dir / announce / bugs |
1.8 | 2017-11-26 | 2022-Q4 (LTS) | 1.8.26 | 2020/08/03 | git / web / dir / announce / bugs |
1.7 | 2016-11-25 | 2021-Q4 (critical fixes only) | 1.7.12 | 2019/10/25 | git / web / dir / announce / bugs |
1.6 | 2015-10-13 | 2020-Q4 (critical fixes only) | 1.6.15 | 2019/10/25 | git / web / dir / announce / bugs |
1.5 | 2014-06-19 | 2020-01-10 (unmaintained) | 1.5.19 | 2016/12/25 | git / web / dir / announce / bugs |
1.4 | 2010-02-26 | 2018-02-08 (unmaintained) | 1.4.27 | 2016/03/14 | git / web / dir / announce / bugs |
1.3 | 2006-06-29 | 2016-03-14 (unmaintained) | 1.3.28 | 2016/03/14 | git / web / dir / announce / bugs |
1.2 | 2003-11-09 | 2011-08-06 (unmaintained) | 1.2.18 | 2008-05-25 | git / web / dir |
1.1 | 2002-03-10 | 2006-01-29 (unmaintained) | 1.1.34 | 2006-01-29 | git / web / dir |
1.0 | 2001-12-16 | 2001-12-30 (unmaintained) | 1.0.2 | 2001-12-30 | git / web / dir |
Quick News
Proxy Switcher: Proxy Switcher Lite: Proxy Manager module with built-in anonymous proxy server finder and proxy server tester. Yes: No: Absence of the banner. Capability display active proxy server. Yes: No: Automatic Proxy Switching Capability. Yes: No: Capability to control scanner speed depending on your connection speed. Contexts 3.4.4 – Fast window switcher. February 21, 2018. https://bestlup448.weebly.com/free-slot-machines-win-real-money.html. Contexts is a radically faster and simpler window switcher. It gives you 4 ways to switch windows: Switch with one click to any window: An auto-hiding sidebar shows your windows organized in groups. To switch to a window. SetupSR.exe (3.8 MB) - Self-installing version for 32-bit Windows. See Install & Uninstall Information for guidance about installation and removal. Download this to a temporary directory and run 'setupsr.exe' to install. SetupSR64.exe (4.0 MB) - Self-installing version for 64-bit Windows. 1.1.1.1 with WARP prevents anyone from snooping on you by encrypting more of the traffic leaving your device. We believe privacy is a right. We won't sell your data, ever. Router / Switch / AP. 1.0) Intel LAN Driver 25.1 for Windows 10 64-bit 3. Intel Serial IO Driver 30.100.2020.7 for Windows 10 64-bit 1 download.
As most already expected it, the HAProxyConf 2020 which was initially planned around November will be postponed to a yet unknown date in 2021 depending on how the situation evolves regarding the pandemic. At this point it's useless to forecast anything, so we'll start to announce it upfront once we have a better visibility of what is possible. In the mean time, if you're impatient, please be aware that all the 2019 talks are available on https://www.haproxyconf.com/2019/presentations/.
July 7th, 2020 : HAProxy 2.2.0 is ready!
HAProxy 2.2 is tha latest LTS release, delivered few weeks late, but for good given that many early bugs were addressed during this time! New features include runtime certificate addition and crtlist management, dynamic error pages and return statements, logging over TCP, refined idle connection pools saving server resources, extensible health checks, improved I/O processing and scheduling for even lower latency processing, even more debugging information. Please check the announce here for more details.
November 25th, 2019 : HAProxy 2.1.0 is out!
Delivered on time, for once, proving that our new development process works better. In short this provides hot-update of certificates, FastCGI to backends, better performance, more debugging capabilities and some extra goodies. Please check the announce here for more details.
Description
HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Over the years it has become the de-facto standard opensource load balancer, is now shipped with most mainstream Linux distributions, and is often deployed by default in cloud platforms. Since it does not advertise itself, we only know it's used when the admins report it :-)
Its mode of operation makes its integration into existing architectures very easy and riskless, while still offering the possibility not to expose fragile web servers to the net, such as below :
We always support at least two active versions in parallel and an extra old one in critical fixes mode only. The currently supported versions are :
- version 2.2 : runtime certificate additions, improved idle connection management, logging over TCP, HTTP 'return' directive, errorfile templates, TLSv1.2 by default, extensible health-checks
- version 2.1 : improved I/Os and multi-threading, FastCGI, runtime certificate updates, HTX-only, improved debugging, removal of obsolete keywords
- version 2.0 : gRPC, layer 7 retries, process manager, SSL peers, log load balancing/sampling, end-to-end TCP fast-open, automatic settings (maxconn, threads, HTTP reuse, pools), .
- version 1.9 : improved multi-threading, end-to-end HTTP/2, connection pools, queue priority control, stdout logging, .
- version 1.8 : multi-threading, HTTP/2, cache, on-the fly server addition/removal, seamless reloads, DNS SRV, hardware SSL engines, .
- version 1.7 : added server hot reconfiguration, content processing agents, multi-type certs, .
- version 1.6 : added DNS resolution support, HTTP connection multiplexing, full stick-table replication, stateless compression, .
- version 1.5 : added SSL, IPv6, keep-alive, DDoS protection, .
Main features
Supported platforms
- Linux 2.4 on x86, x86_64, Alpha, Sparc, MIPS, PARISC
- Linux 2.6-5.x on x86, x86_64, ARM, AARCH64, MIPS, Sparc, PPC64
- Solaris 8/9 on UltraSPARC 2 and 3
- Solaris 10 on Opteron and UltraSPARC
- FreeBSD 4.10 - current on x86
- OpenBSD 3.1 to -current on i386, amd64, macppc, alpha, sparc64 and VAX (check the ports)
- AIX 5.1 - 5.3 on Power™ architecture
Highest performance is achieved with modern operating systems supporting scalable polling mechanisms such as epoll on Linux 2.6/3.x or kqueue on FreeBSD and OpenBSD. This requires haproxy version newer than 1.2.5. Fast data transfers are made possible on Linux 3.x using TCP splicing and haproxy 1.4 or 1.5. Forwarding rates of up to 40 Gbps have already been achieved on such platforms after a very careful tuning. While Solaris and AIX are supported, they should not be used if extreme performance is required.
Backgrounds 6 1 – dynamic desktop wallpapers. Current typical 1U servers equipped with a dual-core Opteron or Xeon generally achieve between 15000 and 40000 hits/s and have no trouble saturating 2 Gbps under Linux.
Performance
[ warning: information in this section dates 2007, things have improved by an order of magnitude since then ]
Well, since a user's testimony is better than a long demonstration, please take a look at Chris Knight's experience with haproxy saturating a gigabit fiber in 2007 on a video download site. Since then, the performance has significantly increased and the hardware has become much more capable, as my experiments with Myricom's 10-Gig NICs have shown two years later. Now as of 2014, 10-Gig NICs are too limited and are hardly suited for 1U servers since they do rarely provide enough port density to reach speeds above 40-60 Gbps in a 1U server. 100-Gig NICs are coming and I expect to run new series of tests when they are available.
HAProxy involves several techniques commonly found in Operating Systems architectures to achieve the absolute maximal performance :
- a single-process, event-driven model considerably reduces the cost of context switch and the memory usage. Processing several hundreds of tasks in a millisecond is possible, and the memory usage is in the order of a few kilobytes per session while memory consumed in preforked or threaded servers is more in the order of megabytes per process.
- O(1) event checker on systems that allow it (Linux and FreeBSD) allowing instantaneous detection of any event on any connection among tens of thousands.
- Delayed updates to the event checker using a lazy event cache ensures that we never update an event unless absolutely required. This saves a lot of system calls.
- Single-buffering without any data copy between reads and writes whenever possible. This saves a lot of CPU cycles and useful memory bandwidth. Often, the bottleneck will be the I/O busses between the CPU and the network interfaces. At 10-100 Gbps, the memory bandwidth can become a bottleneck too.
- Zero-copy forwarding is possible using the splice() system call under Linux, and results in real zero-copy starting with Linux 3.5. This allows a small sub-3 Watt device such as a Seagate Dockstar to forward HTTP traffic at one gigabit/s.
- MRU memory allocator using fixed size memory pools for immediate memory allocation favoring hot cache regions over cold cache ones. This dramatically reduces the time needed to create a new session.
- Work factoring, such as multiple accept() at once, and the ability to limit the number of accept() per iteration when running in multi-process mode, so that the load is evenly distributed among processes.
- CPU-affinity is supported when running in multi-process mode, or simply to adapt to the hardware and be the closest possible to the CPU core managing the NICs while not conflicting with it.
- Tree-based storage, making heavy use of the Elastic Binary tree I have been developping for several years. This is used to keep timers ordered, to keep the runqueue ordered, to manage round-robin and least-conn queues, to look up ACLs or keys in tables, with only an O(log(N)) cost.
- Optimized timer queue : timers are not moved in the tree if they are postponed, because the likeliness that they are met is close to zero since they're mostly used for timeout handling. This further optimizes the ebtree usage.
- optimized HTTP header analysis : headers are parsed an interpreted on the fly, and the parsing is optimized to avoid an re-reading of any previously read memory area. Checkpointing is used when an end of buffer is reached with an incomplete header, so that the parsing does not start again from the beginning when more data is read. Parsing an average HTTP request typically takes half a microsecond on a fast Xeon E5.
- careful reduction of the number of expensive system calls. Most of the work is done in user-space by default, such as time reading, buffer aggregation, file-descriptor enabling/disabling.
- Content analysis is optimized to carry only pointers to original data and never copy unless the data needs to be transformed. This ensures that very small structures are carried over and that contents are never replicated when not absolutely necessary.
All these micro-optimizations result in very low CPU usage even on moderate loads. And even at very high loads, when the CPU is saturated, it is quite common to note figures like 5% user and 95% system, which means that the HAProxy process consumes about 20 times less than its system counterpart. This explains why the tuning of the Operating System is very important. This is the reason why we ended up building our own appliances, in order to save that complex and critical task from the end-user.
In production, HAProxy has been installed several times as an emergency solution when very expensive, high-end hardware load balancers suddenly failed on Layer 7 processing. Some hardware load balancers still do not use proxies and process requests at the packet level and have a great difficulty at supporting requests across multiple packets and high response times because they do no buffering at all. On the other side, software load balancers use TCP buffering and are insensible to long requests and high response times. A nice side effect of HTTP buffering is that it increases the server's connection acceptance by reducing the session duration, which leaves room for new requests.
There are 3 important factors used to measure a load balancer's performance :
Contexts 3 5 1 – Fast Window Switcher Downloads
- The session rate
This factor is very important, because it directly determines when the load balancer will not be able to distribute all the requests it receives. It is mostly dependant on the CPU. Sometimes, you will hear about requests/s or hits/s, and they are the same as sessions/s in HTTP/1.0 or HTTP/1.1 with keep-alive disabled. Requests/s with keep-alive enabled is generally much higher (since it significantly reduces system-side work) but is often meaningless for internet-facing deployments since clients often open a large amount of connections and do not send many requests per connection on avertage. This factor is measured with varying object sizes, the fastest results generally coming from empty objects (eg: HTTP 302, 304 or 404 response codes). Session rates around 100,000 sessions/s can be achieved on Xeon E5 systems in 2014. - The session concurrency
This factor is tied to the previous one. Generally, the session rate will drop when the number of concurrent sessions increases (except with the epoll or kqueue polling mechanisms). The slower the servers, the higher the number of concurrent sessions for a same session rate. If a load balancer receives 10000 sessions per second and the servers respond in 100 ms, then the load balancer will have 1000 concurrent sessions. This number is limited by the amount of memory and the amount of file-descriptors the system can handle. With 16 kB buffers, HAProxy will need about 34 kB per session, which results in around 30000 sessions per GB of RAM. In practise, socket buffers in the system also need some memory and 20000 sessions per GB of RAM is more reasonable. Layer 4 load balancers generally announce millions of simultaneous sessions because they need to deal with the TIME_WAIT sockets that the system handles for free in a proxy. Also they don't process any data so they don't need any buffer. Moreover, they are sometimes designed to be used in Direct Server Return mode, in which the load balancer only sees forward traffic, and which forces it to keep the sessions for a long time after their end to avoid cutting sessions before they are closed. - The data forwarding rate
This factor generally is at the opposite of the session rate. It is measured in Megabytes/s (MB/s), or sometimes in Gigabits/s (Gbps). Highest data rates are achieved with large objects to minimise the overhead caused by session setup and teardown. Large objects generally increase session concurrency, and high session concurrency with high data rate requires large amounts of memory to support large windows. High data rates burn a lot of CPU and bus cycles on software load balancers because the data has to be copied from the input interface to memory and then back to the output device. Hardware load balancers tend to directly switch packets from input port to output port for higher data rate, but cannot process them and sometimes fail to touch a header or a cookie. Haproxy on a typical Xeon E5 of 2014 can forward data up to about 40 Gbps. A fanless 1.6 GHz Atom CPU is slightly above 1 Gbps.
A load balancer's performance related to these factors is generally announced for the best case (eg: empty objects for session rate, large objects for data rate). This is not because of lack of honnesty from the vendors, but because it is not possible to tell exactly how it will behave in every combination. So when those 3 limits are known, the customer should be aware that it will generally perform below all of them. A good rule of thumb on software load balancers is to consider an average practical performance of half of maximal session and data rates for average sized objects.
You might be interested in checking the 10-Gigabit/s page. https://downvfile347.weebly.com/money-blast-slot-machine.html.
Reliability - keeping high-traffic sites online since 2002
Security - Not even one intrusion in 13 years
HAProxy also provides regex-based header control. Parts of the request, as well as request and response headers can be denied, allowed, removed, rewritten, or added. This is commonly used to block dangerous requests or encodings (eg: the Apache Chunk exploit), and to prevent accidental information leak from the server to the client. Other features such as Cache-control checking ensure that no sensible information gets accidentely cached by an upstream proxy consecutively to a bug in the application server for example.
Download
- Development version (2.2) :
- Browse directory for docs, sources and binaries
- Daily snapshots are built once a day when the GIT repository changes
- Latest LTS version (2.2) :
- Release Notes for version 2.2.4
- haproxy-2.2.4.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Previous version (2.1) :
- Release Notes for version 2.1.9
- haproxy-2.1.9.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Previous LTS version (2.0) :
- Release Notes for version 2.0.18
- haproxy-2.0.18.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Previous version (1.9) :
- Release Notes for version 1.9.16
- haproxy-1.9.16.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Previous version (1.8) :
- Release Notes for version 1.8.26
- haproxy-1.8.26.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Older version (1.7) :
- Release Notes for version 1.7.12
- haproxy-1.7.12.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Older version (1.6) :
- Release Notes for version 1.6.15
- haproxy-1.6.15.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Oldest version (1.5) :
- Release Notes for version 1.5.19
- haproxy-1.5.19.tar.gz (MD5) : Source code under GPL
- Browse directory for other files or versions
- Unmaintained version (1.4) :
- Release Notes for version 1.4.27
- haproxy-1.4.27.tar.gz (MD5) : Source code under GPL
- haproxy-1.4.26-linux-i586.gz : (MD5) Linux/i586 executable linked with Glibc 2.2
- haproxy-1.4.26-pcre-solaris-sparc.notstripped.gz : (MD5) Solaris8/Sparc executable
- Browse directory for other files or versions
- Unmaintained version (1.3) :
- Release Notes for version 1.3.28
- haproxy-1.3.28.tar.gz (MD5) : Source code under GPL
- haproxy-1.3.27-linux-i586.gz : (MD5) Linux/i586 executable linked with Glibc 2.2
- haproxy-1.3.27-pcre-solaris-sparc.notstripped.gz : (MD5) Solaris8/Sparc executable
- Browse directory for other files or versions
- Unmaintained branch (1.2) :
- Release Notes for version 1.2.18
- haproxy-1.2.18.tar.gz (MD5) : Source code under GPL
- haproxy-1.2.18-linux-i586.gz : (MD5) Linux/i586 executable linked with Glibc 2.2
- haproxy-1.2.18-sol8-ultrasparc-static-pcre.gz : (MD5) Solaris8/Sparc executable
- Browse directory for other files or versions
- Various Patches :
- Some patches for Stunnel by HAProxy Technologies (formerly Exceliance), such X-Forwarded-For, send-proxy, unix-sockets, multi-process SSL session synchronization, transparent binding and performance improvements.
- http://www.haproxy.com/download/free/patches/linux/epoll-2.4/ : kernel patches to enable epoll on standard Linux 2.4 kernels and on Red Hat Enterprise Linux 3.
- HAProxy Technologies' public patch repository for other patches (stud, stunnel, linux, keepalived, .)
- Browse directory for other (outdated) patches.
- Browsable directory for other files (not only patches)
Documentation
- Reference Manual for version 2.3 (development) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 2.2 (Stable) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 2.1 (Stable) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 2.0 (Stable (LTS)) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.9 (unmaintained) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.8 (Stable (LTS)) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.7 (Critical fixes only) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- management.txt : Management guide in text format
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.6 (Critical fixes only) :
- Starter guide in HTML (up to date, maintained by Cyril Bonté)
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- Management Guide in HTML (up to date, maintained by Cyril Bonté)
- Lua reference manual in HTML (up to date, maintained by Thierry Fournier)
- Lua Architecture in HTML (up to date, maintained by Thierry Fournier)
- intro.txt : Starter guide in text format
- configuration.txt : Configuration Manual in text format
- management.txt : Management guide in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.5 (unmaintained) :
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.4 (unmaintained) :
- Configuration Manual in HTML (up to date, maintained by Cyril Bonté)
- configuration.txt : Configuration Manual in text format
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.3 (unmaintained) :
- configuration.txt : Configuration Manual
- architecture.txt : Architecture Guide
- haproxy-en.txt : old English version, outdated
- haproxy-fr.txt : old French version, outdated
- Browsable directory : Various other docs and diagrams
- Reference Manual for version 1.2 (unmaintained) :
- haproxy-en.txt : English version
- haproxy-fr.txt : French version
- Reference Manual for version 1.1 (unmaintained) :
- haproxy-en.txt : English version
- haproxy-fr.txt : French version
- architecture.txt : Architecture Guide
- Article on Load Balancing (HTML version) : worth reading for people who don't know what type of load balancer they need
Contexts 3 5 1 – Fast Window Switcher Downloader
In addition to Cyril's HTML converter above, an automated format converter is being developed by Pavel Lang. At the time of writing these lines, it is able to produce a PDF from the documentation, and some heavy work is ongoing to support other output formats. Please consult the project's page for more information. Here's an example of what it is able to do on version 1.5 configuration manual.
Commercial Support and availability
- contact HAProxy Technologies to hire some professional services or subscribe a support contract ;
- install HAProxy Enterprise Edition (HAPEE), which is a long-term maintained HAProxy package accompanied by a well-polished collection of software, scripts, configuration files and documentation which significantly simplifies the setup and maintenance of a completely operational solution ; it is particularly suited to Cloud environments where deployments must be fast.
- try an ALOHA appliance (hardware or virtual), which will even save you from having to worry about the system, hardware and from managing a Unix-like system.
I also find it important to credit
Loadbalancer.org. I am not affiliated with them at all but like us, they have contributed a fair amount of time and money to the project to add new features and they help users on the mailing list, so I have some respect for what they do. They're a UK-based company and their load balancer also employs HAProxy, though it is somewhat different from the ALOHA.
Add-on features and contributions
- sFlow support
Neil Mckee posted a patch to the list in early 2013, and unfortunately this patch did not receive any sign of interest nor feedback, which is sad considering the amount of work that was done. I personally am clueless about sFlow and expressed my skepticism to Neil about the benefits of sampling some HTTP traffic when you can get much more detailed informations for free with existing logs.
Neil kindly responded with the following elements :
I agree that the logging you already have in haproxy is more flexible and detailed, and I acknowledge that the benefit of exporting sFlow-HTTP records is not immediately obvious. The value that sFlow brings is that the measurements are standard, and are designed to integrate seamlessly with sFlow feeds from switches, routers, servers and applications to provide a comprehensive end to end picture of the performance of large scale multi-tier systems. So the purpose is not so much to troubleshoot haproxy in isolation, but to analyze the performance of the whole system that haproxy is part of.
Perhaps the best illustration of this is the 1-in-N sampling feature. If you configure sampling.http to be, say, 1-in-400 then you might only see a handful of sFlow records per second from an haproxy instance, but that is enough to tell you a great deal about what is going on -- in real time. And the data will not bury you even if you have a bank of load-balancers, hundreds of web-servers, a huge memcache-cluster and a fast network interconnect all contributing their own sFlow feeds to the same analyzer.
Even after that explanation, no discussion emerged on the subject on the list, so I guess there is little interest among users for now. I suspect that sFlow is probably more deployed among network equipments than application layer equipments, which could explain this situation. The code is large (not huge though) and I am not convinced about the benefits of merging it and maintaining it if nobody shows even a little bit of interest. Thus for now I prefer to leave it out of tree. Neil has posted it on GitHub here : https://github.com/sflow/haproxy.
Please, if you do use this patch, report your feedback to the mailing list, and invest some time helping with the code review and testing.
This table enumerates all known significant contributions that led to version 1.4, as well as proposed fundings and features yet to be developped but waiting for spare time. It is not more up to date though.
Some older code contributions which possibly do not appear in the table above are still listed here.
- Application Cookies
Aleksandar Lazic and Klaus Wagner implemented this feature which was merged in 1.2. It allows the proxy to learn cookies sent by the server to the client, and to find it back in the URL to direct the client to the right server. The learned cookies are automatically purged after some inactive time.
- Least Connections load balancing algorithm
This patch for haproxy-1.2.14 was submitted by Oleksandr Krailo. It implements a basic least connection algorithm. I've not merged this version into 1.3 because of scalability concerns, but I'm leaving it here for people who are tempted to include it into version 1.2, and the patch is really clean. Dragonplay slots free coins.
haproxy-1.2.14-leastconn.diff
- Soft Server-Stop
Aleksandar Lazic sent me this patch against 1.1.28 which in fact does two things. The first interesting part allows one to write a file enumerating servers which will have to be stopped, and then sending a signal to the running proxy to tell it to re-read the file and stop using these servers. This will not be merged into mainline because it has indirect implications on security since the running process will have to access a file on the file-system, while current version can run in a chrooted, empty, read-only directory. What is really needed is a way to send commands to the running process. However, I understand that some people might need this feature, so it is provided here. The second part of the patch has been merged. It allowed both an active and a backup server to share a same cookie. This may sound obvious but it was not possible earlier.
haproxy_comafile+multi-cookie.diff
Usage: Aleks says that you just have to write the server names that you want to stop in the file, then kill -USR2 the running process. I have not tested it though.
- Server Weight
Sébastien Brize sent me this patch against 1.1.27 which adds the 'weight' option to a server to provide smoother balancing between fast and slow servers. It is available here because there may be other people looking for this feature in version 1.1.
I did not include this change because it has a side effect that with high or unequal weights, some servers might receive lots of consecutive requests. A different concept to provide a smooth and fair balancing has been implemented in 1.2.12, which also supports weighted hash load balancing.
patch-haproxy-1.1.27-weight
Usage: specify 'weight X' on a server line.
Note: configurations written with this patch applied will normally still work with future 1.2 versions.
- IPv6 support for 1.1.27
I implemented IPv6 support on client side for 1.1.27, and merged it into haproxy-1.2. Prison architect 2 0c download free. Anyway, the patch is still provided here for people who want to experiment with IPv6 on HAProxy-1.1.
- Other patches
Please browse the directory for other useful contributions. Houdahspot 3 9 1 – advanced front end for spotlight.
Other Solutions
- Linux Virtual Servers (LVS)
Very fast layer 3/4 load balancing merged in Linux 2.4 and 2.6 kernels. Should be coupled with Keepalived to monitor servers. This generally is the solution embedded by default in most IP-based load balancers. - Nginx ('engine X')
Nginx is an excellent piece of software. Initially it's a very fast and reliable web server, but it has grown into a full-featured proxy which can also offer load-balancing capabilities. Nginx's load balancing features are less advanced than haproxy's but it can do extra things (eg: caching, running FCGI apps), which explains why they are very commonly found together. I strongly recommend it to whoever needs a fast, reliable and flexible web server ! - Pound
Pound is very small and reasonably good. It aims at remaining small and auditable prior to being fast. It used to support SSL and keep-alive before HAProxy. Its configuration file is small and simple. It's thread-based, but can be a simpler alternative to HAProxy for a small site when the flexibility and performance of HAProxy are not required. - Pen
Pen is a very simple load balancer for TCP protocols. It supports source IP-based persistence for up to 2048 clients. Supports IP-based ACLs. Uses select() and supports higher loads than Pound but will not scale very well to thousands of simultaneous connections. It's more versatile however, and could be considered as the missing link between HAProxy and socat.
Contacts
- mailing-list :
Read the list archives on mail-archive
Read the list archives on Marc.info(temporarily broken)
Read the list archives on gmane.org(temporarily broken)
Subscribe to the list :
Unsubscribe from the list : - Willy' main site : http://1wt.eu/
- This site in IPv6 only : http://ipv6.haproxy.org/ (should be OK if you see a green square here ⇒ )
- e-mail :
Some people regularly ask if it is possible to send donations, so I have set up a Paypal account for this. Click here if you want to donate.
An IRC channel for haproxy has been opened on FreeNode (but don't seek me there, I'm not) :
irc://irc.gnu.org/%23haproxy
A Slack channel for haproxy exists as well (but don't seek me there, I'm not either) :
https://slack.haproxy.org/
External links
- Linux networking stack from the ground up (parts 1-5) (useful to whoever wants to know what happens below haproxy)
Contexts 3 5 1 – Fast Window Switcher Download
UNDER MAINTENANCE