Latest post
How can I load balance UDP with open source HAProxy?
UDP is a connectionless protocol, meaning it doesn't establish a formal connection or 'handshake' before sending data...
Jake Borman
Navigating the open source journey: When free is awesome, and why commercial solutions have their place
At Loadbalancer.org, our heroes are open source. And for good reason. Open source software plays an intrinsic part in our company, products, and services...
Open source
HAProxy
Lea Friend
DoS vulnerability in OpenSSL related to certificate parsing (CVE-2022-0778)
Customers with manually configured, custom client authentication deployments (rare) or using “re-encrypt to backend” to communicate with untrusted third-party servers (very rare) may be impacted...
Security
Open source
Andrew Howe
ModSecurity DoS vulnerability (CVE-2021-42717)
All WAF vendors and services using ModSecurity are affected by this vulnerability (unless they have the vulnerable piece of code disabled, by chance)...
Open source
Security
WAF
Andrew Howe
The importance of outreach: Introducing students to load balancing
A recent visit to Southampton Solent University...
Events
Open source
Damian Pacuszka
Apache Log4j vulnerability CVE-2021-44228
The Apache Log4j utility is commonly used for logging requests by millions of Java applications to log error messages. However, recently the critical vulnerability CVE-2021-44228 was discovered in the Apache Log4j library...
Security
Open source
Andrew Howe
Extending ModSecurity: How to add completely custom WAF functionality
In this example, I’m going to add a new transformation function to ModSecurity to calculate the Scrabble score of a variable. This will allow us to block HTTP requests containing query string parameters with a Scrabble score above a chosen threshold...
WAF
Open source
Security
Andrew Howe
Announcing CVE-2021-35368: OWASP ModSecurity Core Rule Set Bypass
In early June 2021, I identified a request body bypass vulnerability in the OWASP ModSecurity Core Rule Set (CRS). Loadbalancer.org appliances themselves are unaffected...
Open source
Security
Malcolm Turnbull
Thinking about moving from HAProxy to a proprietary load balancer?
Controversial advice for anyone thinking of moving from HAProxy to a proprietary load balancer...
HAProxy
Open source
Miles Martin
Open source versus proprietary load balancers
Should you invest in a proprietary load balancer from one of the market leaders like F5? Or should you take a chance on open source load balancing software?..
Open source
Andrei Grigoras
How to install and configure HAProxy Layer 7 on Red Hat Linux
Control how HAProxy will be started, stopped, restarted, reloaded, or monitored...
How-tos
HAProxy
Open source
Rosalind Bootle
Open source software: myth-busting, business benefits and FOSDEM '21
At the end of the day open source is really about having access to the source code for your tools and programs, to do whatever you want to do with it...
Open source
Andrew Howe
ModSecurity and the Case of the Never Decreasing Variables
In the world of web application security, it can be invaluable to consider a user's behaviour across the entire duration of their web app session...
Open source
WAF
Security