The latest insights from the load balancing experts | Loadbalancer.org

SSL

For people who understand that security is not a nice picture of a padlock :-)
How-To's
Smart, secure encryption with SNI Neil Stone
As the Internet continues to grow, so do the potential dangers of communicating important information. Gone are the ‘good old days’ where there was an implicit level of trust between users, and as a result, there has been a significant uptake in the requirement to secure data transmission online...

4 min read

Read more
Let's Encrypt — how did we survive without it? Rob Congalton
Let’s Encrypt is awesome! Not only is it more secure than your existing certificate authority. It's also reliable, scalable, fully automated — and free!

7 min read

Read more
How to add Cloudflare in front of HAProxy Thorsten Wetzig
What is Cloudflare? Cloudflare provides a content delivery network (CDN). A CDN is a worldwide network of servers that delivers web content to clients based on the geographic location of the client. Using the Cloudflare

12 min read

Read more
How to load balance Microsoft FTP Server with HAProxy Andrei Grigoras
Open standards are awesome, and the File Transfer Protocol FTP (inspite of its flaws) has been in constant use for an amazing 40 years! FTP can be a pain to run over firewalls and load balancers, so this blog explains how to configure Microsoft FTP and HAProxy.

6 min read

Read more
Client Certificate Authentication with HAProxy Aaron West
Using client certificates for security is a pretty cool idea! You can protect an entire application or even just a specific Uniform Resource Identifier (URI) to only those that provide a valid client certificate.

9 min read

Read more
Loadbalancer.org with Let's Encrypt- quick and dirty! Aaron West
Let’s Encrypt offers us a free way to get SSL certs with the aim to be less complex than our current solutions, hmm... Well that sounds pretty cool! I had known about Let’s

7 min read

Read more
How do I get an A+ from Qualys SSL + FIPS compliance? Scott McKeown
Chasing that eternally moving target that is an A+ from Qualys’ SSL scanner? Well, you’ve found the correct Blog! I’ve been testing again whilst also looking at the effect of FIPS compatible ciphers.

6 min read

Read more
The Poodle SSLv3 - UPDATED - Updated Again Scott McKeown
So here we go again...  Another vulnerability has been found in OpenSSL. However, this is very hard to exploit and requires the hacker to have control of your wireless hotspot or network. If that's the

2 min read

Read more
Stunnel X-Forward-For (XFF) with HAProxy and the PROXY Protocol Rob Cooper
When using proxies such as stunnel and HAProxy it's easy to loose track of the client source IP address. This occurs for example when HAProxy is used in it's default configuration to load balance a

3 min read

Read more
Heartbleed 2.0? Not exactly but more OpenSSL issues have been found Rob Cooper
In the wake of the recent Heartbleed Bug another series of OpenSSL vulnerabilities have been found. Whilst the Heartbleed bug was relatively easy to exploit, the latest batch of bugs are not. However if successfully

1 min read

Read more
Loadbalancer.org releases patch for the OpenSSL heartbleed vulnerability CVE-2014-0160 Rob Cooper
Vulnerability Description The bug is in OpenSSL's implementation of the TLS/DTLS (transport layer security protocols) heartbeat extension (RFC6520). When it is exploited it leads to the leak of memory contents from the server to

2 min read

Read more
SSL offload testing with HAProxy and Stunnel Mark Brookes
There are a lot of SSL offload throughput statistics available for appliances across the internet but rarely do they detail the way they were tested (probably because a lot of the numbers are inflated for

4 min read

Read more
SSL Termination & The BEAST Scott McKeown
Over the last few weeks we have seen more and more users reporting that they have run a security check on the SSL certificate thats installed on their Loadbalancer appliance using the Trustworty Internet Movement

2 min read

Read more
Transparent proxy of SSL traffic using Pound to HAProxy backend patch and how-to Malcolm Turnbull
OK so I've previously blogged about how to get TPROXY and HAProxy working nicely together. But what if you want to terminate SSL traffic on the load balancer in order to use HaProxy to insert

4 min read

Read more
LVS Local node patch for Linux 2.6.25, Centos 5 kernel build how-to Malcolm Turnbull
Standard Kernel builds of LVS (Linux Vitual Server) don't have the ability to load balance traffic that is from the local node. For example if you terminated some SSL traffic using stunnel or pound on

3 min read

Read more
Why do SSL certificates cost so much? Malcolm Turnbull
I was reading a post by Tony Bourke 'license to SSL' about the licencing restrictions of Verisign et al. when it comes to web sites running on clusters. He noted a common misconception that if

1 min read

Read more

Get started

Get in touch

Start a conversation about the right solution for your business.

Get in touch

Create your quote

Transparent pricing you can see straight away.

Create your quote

Download now

Try us free for 30 days – see why our customers love us.

Download now