Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's because iptables do layer 3 load balancing (on a kernel level) while HAProxy does layer 7 (on user level). Layer 3 load balancing is much simpler so there's less work to do. If layer 3 load balancing does work for your use case then HAProxy wasn't the right tool.

BTW: Willy Tarreau (the author of HAProxy) is also a Linux kernel developer and made contributions in those areas, so . If you configure HAProxy to do zero copy forwarding you can get quite good performance.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: