We're the team behind HAProxy, the most widely used software load balancer, and HAProxy One, the world's fastest application delivery and security platform. Our mission is to help organizations simplify, scale, and secure modern applications, APIs, and AI services in any environment. Under the shared HAProxy Technologies byline you'll find product announcements, security updates, technical deep dives, and hands-on tutorials on load balancing, high availability, Kubernetes, and application and API security. Writing under it are the engineers, architects, and support teams who build these products and maintain the open-source core.
HAProxy advisory for CVE-2026-55204: a null pointer dereference in HPACK header handling. While rated 8.7 (High), the real-world risk is low. Details on impact and remediation are provided.
HAProxy patch for two high-severity QUIC vulnerabilities (CVE-2026-26080, CVE-2026-26081) that allow a remote denial of service attack. Upgrade now for protection or disable the QUIC component.
Upgrade to the lastest version of HAProxy Kubernetes Ingress Controller (KIC) to address a vulnerability allowing privilege escalation. Learn about affected versions, remediation, and workarounds.
The latest versions of HAProxy Community and Enterprise have patches for a critical denial of service vulnerability in the mjson library.
The latest versions of HAProxy Fusion fix multiple rsync vulnerabilities related to memory handling and file management in HAProxy Fusion’s Linux-based virtual images. We will cover these CVEs here.
The wait is over! HAProxyConf is coming to San Francisco, California, from June 3 to 5, 2025.
The latest versions of our products fix a vulnerability related to a possible endless loop in the HTTP/2 multiplexer when combined with zero-copy forwarding system in HAProxy, HAProxy Enterprise...
The latest versions of our products fix a vulnerability related to HTTP/1.1 response code mishandling in products written in golang.
The latest versions of our products fix a vulnerability related to OpenSSH’s server (sshd), which is used in the public/private cloud images of HAProxy Enterprise...
We have received questions regarding CVE-2023-45539 issued in November 2023. The versions of our products released on Monday, 21 August 2023 to fix...
If you are using OpenSSL version 3.0 or above with HAProxy, you should update to OpenSSL version 3.0.7.
Do you want to talk for this year's HAProxyConf 2022? Submit your talk for this year's event which will be held on November 8 and 9 in Paris.
In this blog post, you’ll learn how the Proxy Protocol preserves a client’s IP address when that client’s connection passes through a proxy.
Remote Code Execution vulnerability was discovered in the Java Spring Core library. This allows attackers to execute arbitrary code on affected systems.
Vulnerability which is tracked in CVE-2021-44228, dubbed Log4Shell, allows attackers to execute arbitrary code on affected systems.
In this interview, Willy describes his views on the success of the project, and how it grew over the years.
Learn more about why VMware chose to partner with HAProxy Technologies and use the HAProxy as the default load balancer for its Tanzu Kubernetes clusters.
HAProxy Enterprise handles SAML single sign-on for your applications and integrates with identity providers like Azure Active Directory.
Version 2.0 of the HAProxy Data Plane API brings exciting enhancements that unlock the power of HAProxy’s flexible configuration and its runtime capabilities.
HAProxy Enterprise will be offered in the Red Hat Marketplace, allowing OpenShift users to take advantage of its advanced features for Ingress.
HAProxy integrates with AWS X-Ray to give you the best observability across your Amazon Web Services (AWS) resources, including your load balancer.
Transport Layer Security (TLS) is a cryptographic protocol that enables secure communications over a computer network.
