Latest post
How to automate SSL/TLS certificate renewal with Let's Encrypt
How many engineers does it take to renew an SSL/TLS certificate? Several, you might joke. But you may not be far wrong!..
Back to all posts
SSL/TLS
Master and manage SSL/TLS on your load balancer. Find expert guides on termination, certificate management (renewal, monitoring, Let's Encrypt), mTLS setup, and security best practices to ensure encrypted, high-performance application delivery.
Damian Pacuszka
How to automate SSL/TLS certificate renewal with Let's Encrypt
How many engineers does it take to renew an SSL/TLS certificate? Several, you might joke. But you may not be far wrong!..
Security
SSL/TLS
Joe Robinson
How to master SSL termination in HAProxy: considerations and configurations
SSL/TLS termination is the most regularly implemented kind of SSL/TLS offload...
How-tos
HAProxy
Security
Neil Hosking
Bolster your network with mTLS functionality from Loadbalancer.org
For Enterprise 8.9, Loadbalancer.org added a new SSL Terminator for HAProxy, allowing for mutual Transport Layer Security (mTLS) configurations...
Security
Application Management
SSL/TLS
Neil Hosking
How to configure mTLS on a Loadbalancer.org appliance
If you're thinking about giving mTLS a go, why not try it for yourself by following the steps below...
How-tos
Security
SSL/TLS
Neil Stone
The pros and cons of offloading TLS/SSL encryption and decryption to your ADC
TLS encryption (formerly known as SSL encryption) is used to improve the safety of data exchanged over a network. But where should it sit in your network architecture?..
Security
SSL/TLS
Jon Morby
How to create an SSL certificate in Linux
I thought I would try and cover the basics here by explaining how to create an SSL certificate and the various files that you'll end up with...
How-tos
Security
Integrations
Scott Weedon
When is it right to SSL offload?
It's a fair question, right? Let's take away the strain of SSL terminations from our application servers and let the load balancers deal with it. After all, why would we want to bog down our nifty application with network-level considerations?..
How-tos
Storage
Security
Andrew Smalley
How to create a load balancer SSL/TLS certificates report
A customer asked me how to export a list of SSL/TLS certificate expiry dates from our load balancer appliance...
Integrations
How-tos
Automation
Aaron West
Client Certificate Authentication with HAProxy: How to configure
Using client certificates for security is a pretty cool idea! You can protect an entire application or even just a specific Uniform Resource Identifier (URI) to only those that provide a valid client certificate...
How-tos
Security
HAProxy
Scott McKeown
How do I get an A+ from Qualys SSL, but keep FIPS compliance as well?
Is getting an A+ rating with the Qualys scanner starting to feel a bit like chasing a mythical unicorn? Every time you get close to catching and keeping the beast — it run's away and they change the rules again!..
Security
How-tos
SSL/TLS
Rob Cooper
Stunnel X-Forward-For (XFF) with HAProxy and the PROXY Protocol
By default, the source IP address of the packet reaching the web servers is the IP address of the load balancer and not the IP address of the client...
Open source
HAProxy
How-tos
Rob Cooper
Heartbleed 2.0? Not exactly but more OpenSSL issues have been found
Whilst the Heartbleed bug was relatively easy to exploit, the latest batch of bugs are not...
Security
SSL/TLS