Posts

Showing posts from April, 2020

HAProxyConf 2019: Inspect, Control, Report: HAProxy as the SRE’s Door Man

Image
In November 2019 I spoke at HAProxyConf in Amsterdam about how we at CenterDevice use HAProxy to protect backend servers from malicious users and log information that is vital during troubleshooting. HAProxy ACLs serve to classify unwanted traffic, including vulnerability scanners and spam bots, and then HAProxy deny rules filter traffic. Moreover I talk about how HAProxy gives us detailed logs and metrics, which we visualize using Grafana, Elasticsearch and Kibana, and how we employ DNS service discovery to automatically configure load balancing to backend servers. Conveniently the HAProxy folks have provided a full transcript of the presentation, as well as a recording. To read along, visit the HAProxy User Spotlight Series page .