HAProxy is not affected by the HTTP/2 Rapid Reset Attack (CVE-2023-44487)

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • haproxy

    HAProxy Load Balancer's development branch (mirror of git.haproxy.org)

  • I wanted to try it out just now but hit a roadblock immediately - it cannot automatically obtain and maintain TLS certificates. You have to use an external client (e.g. acme.sh), set up a cron to check/renew them, and poke HAProxy to reload them if necessary. I'm way past doing this in 2023.

    https://www.haproxy.com/blog/haproxy-and-let-s-encrypt

    https://github.com/haproxy/haproxy/issues/1864

  • acme.sh

    A pure Unix shell script implementing ACME client protocol

  • you may wish to use certbot instead:

    https://github.com/acmesh-official/acme.sh/issues/4659

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts