Today, we’re excited to announce a Chainguard Image for HAProxy. If you’ve ever used the internet, you’ve almost definitely used HAProxy. In fact, you’re probably using HAProxy right now without even knowing it. HAProxy is almost ubiquitous at the edge of cloud, internet, and public facing web services. It’s commonly used for load balancing and SSL termination, making it one of the most security critical deployments on the internet today.
In fact, HAProxy works so well and is so easy to use that it’s easy to forget about. While this is great from an infrastructure and cost perspective, it can be problematic for security, since HAProxy still needs to be regularly patched and updated. Thankfully, the Chainguard Image for HAProxy is built on Wolfi, our secure-by-default Linux (un)distristribution. This means it’s lighter-weight (up to 90% smaller than some of the alternatives), has fewer CVEs (aiming for zero-known CVEs), and is built with our hardened toolchain, making it as memory-safe as possible.
You can see that the Chainguard Image is only 16.2MB, 25% smaller than the closest alternative and 90% smaller than some of the others!
As always, the binaries in our Images are built from source and come with comprehensive SBOMs from the start. These SBOMs contain the package metadata for everything in the Image and can be used for vulnerability scanning or license compliance. You can download the SBOMs for these containers with cosign:
If you want to see upwards of an 90% reduction in your HAProxy Image sizes with more security built in by default start using Chainguard’s HAProxy Image today at github.com/chainguard-images, or get started with our HAProxy Image using documentation in Chainguard Academy. Chainguard Images are now available for kubectl, Python, Redis, Bazel, curl, Git, Go, Jenkins, Postgres, Ruby and more. If you’re interested in support contracts, SLAs for vulnerabilities, FIPS-enabled images, or support for custom images or older versions, please reach out.
We are always looking for ways to improve our end user experience. If you have feedback or would like to submit a support issue you can reach out to us directly or file it here.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
