HAProxy Enterprise 2.9 Released
May 08, 2024

HAProxy Technologies announced the launch of HAProxy Enterprise 2.9.

HAProxy Enterprise 2.9 advances the security solution with next-generation WAF and bot management capabilities.

This release also extends HAProxy Enterprise’s legendary performance and flexibility to support real-time applications that use the UDP transport protocol that powers much of the modern web. Supported by industry-leading benchmark results, these landmark features offer customers a powerful solution to security, latency, and scale challenges.

“The application delivery market is poised for disruption, and we’re eager to play that role,” said Dujko Radovnikovic, CEO, HAProxy Technologies. “Too often, application teams are forced to compromise between security, performance, and simplicity. With the launch of HAProxy Enterprise 2.9, we’re delivering secure application delivery without compromise. This is the fastest, simplest, and most secure solution on the market.”

HAProxy Enterprise 2.9 simplifies application delivery, enhances security, and boosts scalability. Key features include a next-generation WAF, bot management, and UDP load balancing for time-sensitive applications.

- Web Application Firewall: A web application firewall is crucial for protecting applications from attacks such as SQL injection, cross-site scripting (XSS), and remote file inclusion (RFI) that can cause downtime, data loss, fraud, and more.

The next-generation HAProxy Enterprise WAF powered by the unique Intelligent WAF Engine brings industry-leading efficacy and performance, helping customers protect their business and reputation, simplify security, and reduce the impact on application performance and user experience. The Intelligent WAF Engine is a single low-latency process based on the company’s unique data science, security analytics, and real-world datasets. It identifies security threats using a non-signature-based detection system capable of blocking emerging and zero-day threats without requiring users to create and manage long or complex lists of rules.

HAProxy Enterprise WAF protects application traffic, provides optional OWASP Core Rule Set compatibility, reduces false positives, and minimizes latency. In testing based on open source WAF benchmark data, it scores a balanced accuracy of 98.53% (compared to the industry average which is below 90%) with latency below measurable thresholds for the majority of attack payloads. The OWASP CRS compatibility mode provides an incredibly low false positive rate of 1.78% at paranoia level 2 (compared with 28.36% for the ModSecurity WAF at the same paranoia level).

- Bot Management: Organizations with websites and web applications must protect against the effects of malicious bots, which can include DDoS attacks, ad fraud, content scraping, vulnerability scanning, and API abuse.

The HAProxy Enterprise Bot Management Module brings fast, reliable, and flexible management of automated traffic. It empowers customers to protect their business and reduce the resource cost of serving requests from unwanted bots.

The HAProxy Enterprise Bot Management Module identifies bot traffic reliably and with low latency. Detection, processing, and enforcement are done locally on each HAProxy Enterprise instance, with no reliance on an external connection. This keeps customers’ data local and secure, enabling compliance with privacy and data protection regulations.

Flexible integration with HAProxy Enterprise's suite of other powerful security layers (including the next-generation HAProxy Enterprise WAF and Global Rate Limiting) allows customers to tailor their protection and enforcement options based on the context provided by the HAProxy Enterprise Bot Management Module and the other security signals available in HAProxy Enterprise.

- UDP Proxying and Load Balancing: UDP is a connectionless protocol used for time-sensitive applications such as DNS lookups, streaming video, playing online games, and transporting log data. Load balancing is critical to providing reliable and performant application delivery.

HAProxy Enterprise provides unified load balancing with support for a broad range of protocols. HAProxy Enterprise 2.9 extends HAProxy Enterprise’s performance and reliability to UDP applications (such as those using DNS, NTP, RADIUS, or Syslog).

The HAProxy Enterprise UDP Module provides best-in-class UDP performance, enabling customers to scale higher, eliminate performance bottlenecks, reduce resource utilization on servers and cloud compute, and decrease overall costs.

In a performance benchmark of Syslog throughput with a log line message size of 1,472 Bytes, a single instance of HAProxy Enterprise 2.9 processed 3.8 million Syslog messages per second (46Gb/s) – 4.6X faster than the nearest enterprise competitor. When sending Syslog messages to log servers with a bandwidth of 40Gb/s, HAProxy Enterprise 2.9 achieved a very high delivery rate of 99.2% – 4X more reliable message delivery than the nearest enterprise competitor. UDP does not perform error correction, so reliable message delivery is critical to providing high quality of service.

Existing customers can upgrade to HAProxy Enterprise 2.9 today.

Share this

Industry News

May 16, 2024

Pegasystems announced the general availability of Pega Infinity ’24.1™.

May 16, 2024

Mend.io and Sysdig unveiled a joint solution to help developers, DevOps, and security teams accelerate secure software delivery from development to deployment.

May 16, 2024

GitLab announced new innovations in GitLab 17 to streamline how organizations build, test, secure, and deploy software.

May 16, 2024

Kobiton announced the beta release of mobile test management, a new feature within its test automation platform.

May 15, 2024

Gearset announced its new CI/CD solution, Long Term Projects in Pipelines.

May 15, 2024

Rafay Systems has extended the capabilities of its enterprise PaaS for modern infrastructure to support graphics processing unit- (GPU-) based workloads.

May 15, 2024

NodeScript, a free, low-code developer environment for workflow automation and API integration, is released by UBIO.

May 14, 2024

IBM announced IBM Test Accelerator for Z, a solution designed to revolutionize testing on IBM Z, a tool that expedites the shift-left approach, fostering smooth collaboration between z/OS developers and testers.

May 14, 2024

StreamNative launched Ursa, a Kafka-compatible data streaming engine built on top of lakehouse storage.

May 14, 2024

GitKraken acquired code health innovator, CodeSee.

May 13, 2024

ServiceNow introduced a new no‑code development studio and new automation capabilities to accelerate and scale digital transformation across the enterprise.

May 13, 2024

Security Innovation has added new skills assessments to its Base Camp training platform for software security training.

May 13, 2024

CAST introduced CAST Highlight Extensions Marketplace — an integrated marketplace for the software intelligence product where users can effortlessly browse and download a diverse range of extensions and plugins.

May 09, 2024

Red Hat and Elastic announced an expanded collaboration to deliver next-generation search experiences supporting retrieval augmented generation (RAG) patterns using Elasticsearch as a preferred vector database solution integrated on Red Hat OpenShift AI.

May 09, 2024

Traceable AI announced an Early Access Program for its new Generative AI API Security capabilities.