5 ms·

Agreed. Haproxy is an absolute wonder compared to similar systems. It all just feels so much cleaner, thought out, and built from the ground up for many differe

by chaps 3y ago

Agreed. Haproxy is an absolute wonder compared to similar systems. It all just feels so much cleaner, thought out, and built from the ground up for many different use cases. It very much has a feel that reminds me a lot of the spirit of sqlite.

tpmx 3y ago
Yeah. Stringency and rigor are words that come to mind.
andyfleming 3y ago
How does it compare with Caddy?
- superq 3y ago
  Caddy is a bit quick and dirty, rapidly-developing, with neat plugins but hard to configure for more complex scenarios and too light on the docs (IMO). HA Proxy is robust, comprehensive, mature, and bulletproof. It's basically boring because it works so well. If you have to choose only one to learn, choose HA Proxy.
  - frankjr 3y ago
    I wanted to try it out just now but hit a roadblock immediately - it cannot automatically obtain and maintain TLS certificates. You have to use an external client (e.g. acme.sh), set up a cron to check/renew them, and poke HAProxy to reload them if necessary. I'm way past doing this in 2023. https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://github.com/haproxy/haproxy/issues/1864 https://github.com/haproxy/haproxy/issues/1864
    - nickramirez 3y ago
      If getting Let's Encrypt to work with HAProxy is your only struggle, you'll soon overcome it and be loving HAProxy. And there are multiple ways to set up Let's Encrypt, if you don't want to use acme.sh. For example, you could use certbot. There are blog posts that cover that pretty well.
    - superq 3y ago
      you may wish to use certbot instead: https://github.com/acmesh-official/acme.sh/issues/4659 https://github.com/acmesh-official/acme.sh/issues/4659
xiasongh 3y ago
What about nginx? I'm not too familiar but I was under the impression that it was the safe choice
- tpmx 3y ago
  It's primary focus is/was being a web server - a faster Apache. This shows. Also (after the acqusition by F5 in 2019?) more features are kept away from the open source version compared to HAProxy.

by chaps 3y ago

tpmx 3y ago

Yeah. Stringency and rigor are words that come to mind.

andyfleming 3y ago

How does it compare with Caddy?

superq 3y ago
Caddy is a bit quick and dirty, rapidly-developing, with neat plugins but hard to configure for more complex scenarios and too light on the docs (IMO). HA Proxy is robust, comprehensive, mature, and bulletproof. It's basically boring because it works so well. If you have to choose only one to learn, choose HA Proxy.
- frankjr 3y ago
  I wanted to try it out just now but hit a roadblock immediately - it cannot automatically obtain and maintain TLS certificates. You have to use an external client (e.g. acme.sh), set up a cron to check/renew them, and poke HAProxy to reload them if necessary. I'm way past doing this in 2023. https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://github.com/haproxy/haproxy/issues/1864 https://github.com/haproxy/haproxy/issues/1864
  - nickramirez 3y ago
    If getting Let's Encrypt to work with HAProxy is your only struggle, you'll soon overcome it and be loving HAProxy. And there are multiple ways to set up Let's Encrypt, if you don't want to use acme.sh. For example, you could use certbot. There are blog posts that cover that pretty well.
  - superq 3y ago
    you may wish to use certbot instead: https://github.com/acmesh-official/acme.sh/issues/4659 https://github.com/acmesh-official/acme.sh/issues/4659

xiasongh 3y ago

What about nginx? I'm not too familiar but I was under the impression that it was the safe choice

tpmx 3y ago
It's primary focus is/was being a web server - a faster Apache. This shows. Also (after the acqusition by F5 in 2019?) more features are kept away from the open source version compared to HAProxy.