Latest post
High zero-day in Citrix NetScaler ADC & Gateway: Patch CVE-2026-88779
A high-severity memory overflow vulnerability was disclosed, affecting Citrix NetScaler ADC and Citrix NetScaler Gateway...
Back to all posts
Security
Learn how to strengthen your infrastructure with Web Application Firewalls (WAF) and advanced security features. Perform SSL/TLS offloading and protect against application layer threats to ensure your critical systems are always compliant and protected.
Andrew Smalley
Shell-shocked by shell shock? I give you "CMD Caret" ^&
There seems to have been so much hype over the recent bash bug, shell shock! And there were all the people in the Microsoft world thinking YES we are so cool we are NOT affected by it!..
Security
Rob Cooper
Heartbleed 2.0? Not exactly but more OpenSSL issues have been found
Whilst the Heartbleed bug was relatively easy to exploit, the latest batch of bugs are not...
Security
SSL/TLS
Rob Cooper
Loadbalancer.org releases patch for the OpenSSL heartbleed vulnerability CVE-2014-0160
To ensure complete protection all SSL certificates that have been used with a vulnerable version of OpenSSL should be regenerated using a new private key...
Security
How-tos
SSL/TLS
Aaron West
Why did my Loadbalancer just fail the PCI compliance test?
Let me first say that I'm not really a fan of PCI scanners. It's not so much that I'm anti security scanners but rather that scanning for vulnerabilities based on only the version number a package returns seems rather simplistic to me...
Security
Mark Brookes
SSL offload testing with HAProxy and Stunnel
There are a lot of SSL offload throughput statistics available for appliances across the internet but rarely do they detail the way they were tested...
Open source
HAProxy
How-tos
Scott McKeown
Secure Your Web Servers: SSL Termination and BEAST
The BEAST attack is a practical attack based on a protocol vulnerability and mainly affects the client side...
Security
How-tos
SSL/TLS
Malcolm Turnbull
For any poor sod who needs to deal with the PCI Data Security Standard (PCI DSS)
Any engineer dealing with PCI DSS compliance issues probably looses a little bit of the joy in life...
Security
Malcolm Turnbull
Transparent proxy of SSL traffic using Pound to HAProxy backend patch and how-to
I've previously blogged about how to get TPROXY and HAProxy working nicely together, but what if you want to terminate SSL traffic on the load balancer to use HAProxy to insert cookies in the standard HTTP stream to the backend servers?..
HAProxy
How-tos
Open source