HNHacker News
TopNewBestAskShowJobs

rogerdonut

72 karma · joined June 27, 2017

submissionscomments
rogerdonut··on HAProxy 2.0
The "official" HAProxy docker builds are strictly controlled by the Docker team. For builds created directly by HAProxy Technologies you can find them here: https://hub.docker.com/u/haproxytech
rogerdonut··on HAProxy 2.0
Yes, the same configuration should work between both. Although some options are no longer required to be set such as nbproc/nbthread. To be safe pass it through the configuration checker (-c on the command line).
rogerdonut··on Ask HN: Who is hiring? (June 2019)
HAProxy Technologies | Software & Systems Engineers, Dev. Advocate | Waltham, MA | Paris, France | Zagreb, Croatia | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, & a Developer Advocate. We're also seeking Senior Systems Engineers (Linux).

Developer Advocate:

Looking for a developer advocate who can represent us at meetups, conferences, and anything else that aids in making developers aware of new products, features, and changes. This role would also assist with content creation. Ideal candidates are outgoing, up-to-date with industry trends, and come from a development background.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

Senior Systems Engineer:

We are seeking Senior Systems Engineers (Linux) to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Knowledge of HAProxy is a plus.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on Ask HN: Who is hiring? (April 2019)
HAProxy Technologies | Software & Systems Engineers, UI/UX, Dev. Advocate | Waltham, MA | Paris, France | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, UI/UX designer, developer evangelist. We're also seeking Senior Systems Engineers (Linux).

Developer Advocate:

Looking for a developer advocate who can represent us at meetups, conferences, and anything else that aids in making developers aware of new products, features, and changes. This role would also assist with content creation. Ideal candidates are outgoing, up-to-date with industry trends, and come from a development background.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

UI/UX:

We are looking for UI/UX designer who has experience with designing high-quality intuitive user interfaces to meet and exceed our customers’ expectations.

Senior Systems Engineer:

We are seeking Senior Systems Engineers (Linux) to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Knowledge of HAProxy is a plus.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on How to build a distributed throttling system with Nginx, Lua, and Redis
Something very similar can be achieved in HAProxy using a powerful feature called stick tables. [1] [2] [3]

[1] https://www.haproxy.com/blog/introduction-to-haproxy-stick-t...

[2] https://www.haproxy.com/blog/bot-protection-with-haproxy/

[3] https://www.haproxy.com/blog/using-haproxy-as-an-api-gateway...

rogerdonut··on Ask HN: Who is hiring? (March 2019)
HAProxy Technologies | Software & Systems Engineers, UI/UX, Dev. Advocate | Waltham, MA | Paris, France | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, UI/UX designer, developer evangelist. We're also seeking Senior Systems Engineers (Linux).

Developer Advocate:

Looking for a developer advocate who can represent us at meetups, conferences, and anything else that aids in making developers aware of new products, features, and changes. This role would also assist with content creation. Ideal candidates are outgoing, up-to-date with industry trends, and come from a development background.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

UI/UX:

We are looking for UI/UX designer who has experience with designing high-quality intuitive user interfaces to meet and exceed our customers’ expectations.

Senior Systems Engineer:

We are seeking Senior Systems Engineers (Linux) to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Knowledge of HAProxy is a plus.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on Ask HN: Who is hiring? (February 2019)
HAProxy Technologies | Software & Systems Engineers, UI/UX, Dev. Advocate | Waltham, MA | Paris, France | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, UI/UX designer, developer evangelist. We're also seeking Senior Systems Engineers (Linux).

Developer Advocate:

Looking for a developer advocate who can represent us at meetups, conferences, and anything else that aids in making developers aware of new products, features, and changes. This role would also assist with content creation. Ideal candidates are outgoing, up-to-date with industry trends, and come from a development background.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

UI/UX:

We are looking for UI/UX designer who has experience with designing high-quality intuitive user interfaces to meet and exceed our customers’ expectations.

Senior Systems Engineer:

We are seeking Senior Systems Engineers (Linux) to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Knowledge of HAProxy is a plus.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on Ask HN: Who is hiring? (January 2019)
HAProxy Technologies | Software Engineer, Systems Engineer | Waltham, MA | Paris, France | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, and Frontend (javascript). We're also seeking Senior Systems Engineers (Linux).

Below you will find the job descriptions for each.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

Frontend:

We are looking for an agile and responsible person to join our team as Frontend (JavaScript) Developer. Our department’s mission is developing high-performance, high-quality intuitive user interfaces to meet and exceed our customers’ expectations.

Senior Systems Engineer:

We are seeking Senior Systems Engineers (Linux) to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Knowledge of HAProxy is a plus.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on Envoy Proxy at Reddit
HAProxy supports quite complex configurations. We've actually found that many of our users are only realizing extremely basic capabilities so we have been working on increasing our blog content to help them take advantage of some of the more complex configurations that can be done. We've even found that many users are not aware that HAProxy now supports Hitless Reloads [1].

Quite a bit of complex routing and dynamic configurations can be provided by map files [2] and these and many other settings can be updated directly from the Runtime API [3].

With that said -- we are actively working to make things even better and intend to introduce support for updating SSL certificates/keys directly through the Runtime API as well as introducing a Data Plane API for HAProxy.

We have a new release coming any day now and this will lay the foundation that will allow us to continue to provide best-in-class performance while accelerating cutting edge feature delivery.

[1] https://www.haproxy.com/blog/hitless-reloads-with-haproxy-ho... [2] https://www.haproxy.com/blog/introduction-to-haproxy-maps/ [3] https://www.haproxy.com/blog/dynamic-configuration-haproxy-r...

rogerdonut··on Ask HN: Who is hiring? (December 2018)
HAProxy Technologies | Software Engineer, Support Engineer | Waltham, MA | Paris, France | REMOTE

HAProxy Technologies is the company behind the world's fastest and most widely used open-source software load balancer.

We're looking for developers stretching across many spectrums: C, Golang, and Frontend (javascript).

We're also seeking support engineers for our enterprise product.

Below you will find the job descriptions for each.

C:

We are looking to reinforce the development team of HAProxy and are looking for developers who have solid skills in Shell, C, HTTP, TCP/IP and uses Git. Knowledge of cloud environment is a plus. We are looking for people who are not afraid of patching the Linux Kernel and who can quickly become autonomous.

Golang:

We are looking for Go developers with 2+ years of experience in Kubernetes and Cloud environments, as well as load balancing. A Bachelors or higher degree in IT is desirable. If you want to contribute to the software enabling performance and reliability of some of the largest websites on the internet.

Frontend:

We are looking for an agile and responsible person to join our team as Frontend (JavaScript) Developer. Our department’s mission is developing high-performance, high-quality intuitive user interfaces to meet and exceed our customers’ expectations.

Enterprise Support Engineer:

We are seeking support engineers to work out of our Waltham, MA office or remotely in the EST/CST/MST/PST timezones. Responsibilities will be supporting our customers who are using HAProxy Enterprise and ALOHA load balancing products (and new products as they become available) by assisting in writing configurations, solving issues, and performing remote debugging.

Please send cover letter and resume to careers@haproxy.com

rogerdonut··on Application-Layer DDoS Attack Protection with HAProxy
No, the peers protocol only syncs the stick-table data between other haproxy instances, but doesn't aggregate the values. The stick table aggregator aggregates all of the values from all of your haproxy instances.

Assume that you have 2 haproxy instances and a client makes 2 requests and each request lands on a separate haproxy instance. With peers, the request count would sync as "1" but with the stick table aggregator the request count would sync as "2".

rogerdonut··on Application-Layer DDoS Attack Protection with HAProxy
You might want to check out this post on using HAProxy as an API Gateway:

https://www.haproxy.com/blog/using-haproxy-as-an-api-gateway...

It has a section on rate limiting. Specifically check out the section which starts with the sentence: "Optionally, instead of a daily limit as used above, you can also do it based on the rate of the requests."

rogerdonut··on Application-Layer DDoS Attack Protection with HAProxy
We have updated the post and added a section to match this use case. You can find it under the subsection "Protecting TCP (non-HTTP) Services"
rogerdonut··on Application-Layer DDoS Attack Protection with HAProxy
Soon we'll release a post about bot detection and protection with HAProxy. If you'd like to see us cover a specific topic feel free to reply to me here and I'll pass it onto the team.
rogerdonut··on Introduction to HAProxy Maps
We greatly appreciate these comments :) I'll pass these nice words on to the teams involved. Regarding the hardware -- I'll submit that suggestion as I believe it's definitely a good topic to cover. Thanks again!
rogerdonut··on Using HAProxy as an API Gateway, Part 1
The current method integrates with both init scripts and systemd. You shouldn't need to manually pass any of that information. Also, the -x option is not required if you are running HAProxy in master/worker mode in which case sending a SIGUSR2 to the master process would be sufficient. With that said, we do have further improvements planned for an upcoming release. Stay tuned :)
rogerdonut··on Using HAProxy as an API Gateway, Part 1
Hello, HAProxy 1.8 brought hitless reloads and has solved all of these issues. You can find information on this here [1][2]

[1] https://www.haproxy.com/blog/truly-seamless-reloads-with-hap...

[2] https://www.haproxy.com/blog/hitless-reloads-with-haproxy-ho...

rogerdonut··on Using HAProxy as an API Gateway, Part 1
Hello, HAProxy has a long history of being secure [1]. In a standard configuration it also segregates itself and spawns within a chroot.

Booking.com [2] uses HAProxy for edge delivery over other software load balancers.

Github [3][4] has used it to mitigate DDoS attacks and StackOverflow [5] has used it to detect and protect against bot threats.

Finally, phk, the author of Varnish states [6] (in regards to implementing SSL/TLS): “When I look at something like Willy Tarreau's HAProxy I have a hard time to see any significant opportunity for improvement.”

[1] https://www.haproxy.org/#secu

[2] https://events.static.linuxfound.org/sites/events/files/slid...

[3] https://www.youtube.com/watch?v=xxs7CoLMXt8

[4] https://githubengineering.com/glb-part-2-haproxy-zero-downti...

[5] https://events.static.linuxfound.org/sites/events/files/slid...

[6] https://varnish-cache.org/docs/trunk/phk/ssl_again.html

rogerdonut··on Introduction to HAProxy Stick Tables
Hello, feel free to hop on the HAProxy Slack: slack.haproxy.org or optionally on IRC: Freenode/chat.freenode.net #haproxy and we'll be more than happy to take a peek at the errors / configuration in question.
rogerdonut··on Introduction to HAProxy ACLs
Thanks for pointing this out. We have corrected this.
← PreviousPage 2 of 2