Web Servers & Reverse Proxies: Apache, Nginx, HAProxy, Traefik and more¶
Architectural Context
Detailed reference for Web Servers & Reverse Proxies: Apache, Nginx, HAProxy, Traefik and more in the context of Networking & Service Mesh.
Standard Reference¶
- nginx.com: The Complete NGINX Cookbook π [COMMUNITY-TOOL]
- Koa.js [COMMUNITY-TOOL]
- nixCraft: 9 Awesome Open Source Web Performance Software For Linux and Unix-like' Systems [COMMUNITY-TOOL]
- Dzone Refcard: Essential Apache HTTP Server [COMMUNITY-TOOL]
- nixCraft: How to secure Apache with Letβs Encrypt Certificates on RHEL 8 [COMMUNITY-TOOL]
- Dzone: Nginx Reverse Proxy Ubuntu 18.04 [COMMUNITY-TOOL]
- How To Use the Official NGINX Docker Image [COMMUNITY-TOOL]
- medium: Using Nginx-Ingress as a Static Cache for Assets Inside Kubernetes [COMMUNITY-TOOL]
- Wikipedia: HAProxy [COMMUNITY-TOOL]
- dzone.com: How to Configure HAProxy as a Proxy and Load Balancer [COMMUNITY-TOOL]
- High priority request queue with HAProxy [COMMUNITY-TOOL]
- medium.com/beyn-technology: Is Nginx dead? Is Traefik v3 20% faster than' Traefik v2? [COMMUNITY-TOOL]
Networking¶
Fundamentals¶
Load Balancing¶
- opensource.com: A beginner's guide to load balancing [COMMUNITY-TOOL] β A high-level introductory guide to load balancing strategies. It explains the differences between Layer 4 (TCP) and Layer 7 (HTTP) routing algorithms, making it a useful primer for developers designing multi-region architectures.
Ingress¶
Skipper¶
HTTP Routing¶
- opensource.com: Try this Kubernetes HTTP router and reverse proxy [ADVANCED LEVEL] [COMMUNITY-TOOL] β An introduction to Skipper, an open-source HTTP router created by Zalando. Explores its use case as a highly customizable Kubernetes ingress controller with extensive routing filters tailored for large-scale production architectures.
Traefik¶
Istio Integration¶
- thenewstack.io: Using Traefik Ingress Controller with Istio Service Mesh [ADVANCED LEVEL] [ENTERPRISE-STABLE] β A valuable integration guide demonstrating how to use Traefik as the external edge ingress router while leveraging Istio's internal service mesh to govern east-west traffic patterns and microservices telemetry.
Kubernetes Ingress¶
- opensource.com: Directing Kubernetes traffic with Traefik [COMMUNITY-TOOL] β An introductory article explaining how to set up Traefik as an Ingress Controller in Kubernetes. It focuses on setting up path-based routing rules and using labels to automate routing table updates.
Kustomize Deployments¶
- blog.tomarrell.com: Kustomize: Traefik v2.2 as a Kubernetes Ingress Controller [LEGACY] β An operations blog outlining Traefik v2.2 deployment using Kustomize overlays. Although the specific Traefik CRD API versions are legacy, the architectural structure of managing ingress with Kustomize remains highly educational.
- (2026) Traefik πππππ [DE FACTO STANDARD] β Traefik is a modern cloud-native HTTP reverse proxy and ingress controller designed to automatically discover backend services from platforms like Kubernetes, Docker, and Consul. Its auto-configuration feature and native support for Let's Encrypt certificates simplify cluster operations.
Load Balancing (1)¶
HAProxy¶
Implementation¶
- tecmint.com: How to Setup High-Availability Load Balancer with βHAProxyβ' to Control Web Server Traffic [COMMUNITY-TOOL] [GUIDE] β A detailed linux-level guide for implementing HAProxy from scratch. Guides the platform engineer through initial package deployment, configuration mapping, backend health checking, and metric page exposure.
Nginx Integration¶
- Tecmint.com: How to Setup HAProxy as Load Balancer for Nginx on CentOS 8 [COMMUNITY-TOOL] [GUIDE] β A configuration-focused tutorial detailing how to chain HAProxy as a frontend load balancer in front of an Nginx web tier on CentOS 8. Note: CentOS 8 is end-of-life, meaning parts of this OS guide must be updated, but the routing concepts remain sound.
- (2026) haproxy.org [ADVANCED LEVEL] πππππ [DE FACTO STANDARD] β The official site for HAProxy, the high-performance TCP/HTTP load balancer. Renowned for its extreme efficiency and microsecond-level latency control, HAProxy is an industry standard for routing massive amounts of concurrent web traffic.
Reverse Proxy¶
Apache HTTPD¶
Jenkins Integration¶
- (2021) Apache Reverse Proxy for Jenkins β 1 π [LEGACY] β A historical configuration repository demonstrating how to put Apache behind a Jenkins installation. Due to more than 4 years of inactivity and minimal community adoption, this project is deprioritized and kept primarily as a legacy configuration sample.
Web Servers¶
Apache HTTPD (1)¶
Reverse Proxy (1)¶
- Apache Reverse Proxy Guide [DOCUMENTATION] [ENTERPRISE-STABLE] β The official configuration guide for setting up Apache as a reverse proxy using
mod_proxy. Delivers production-grade recommendations for managing connection pools, configuring SSL offloading, and tuning load-balancing headers. - Apache [DE FACTO STANDARD] [LEGACY] β The home page for Apache HTTPD, the foundational open-source web server of the internet. While newer microservices architectures typically leverage Nginx or Envoy, Apache remains highly relevant for legacy proxy configurations and traditional web hosting setups.
Nginx¶
Configuration Generators¶
- NGINXConfig [DE FACTO STANDARD] β DigitalOcean's visual configuration tool for Nginx. It generates highly secure, production-tested server blocks tailored for modern features like HTTP/2, custom security headers, SSL/TLS optimizations via Let's Encrypt, and Gzip compression.
Guides¶
- freecodecamp.org: The NGINX Handbook π [GUIDE] [ENTERPRISE-STABLE] [GUIDE] β An extensive manual explaining the underlying mechanics of Nginx. Covers everything from server blocks and upstream definitions to proxy routing rules, security hardening, and cache configuration optimization.
Interactive Playgrounds¶
- jvns.ca: New tool: an nginx playground [COMMUNITY-TOOL] β An introductory blog post by Julia Evans launching an interactive Nginx configuration playground. It explains the core configuration blocks and how the visual playground simplifies debugging path matches and header rewrites.
- nginx-playground.wizardzines.com π [ENTERPRISE-STABLE] β The web-based visual Nginx sandbox environment created by Wizard Zines. It provides immediate graphical feedback on how routing, header injections, and rewrite directives behave without requiring a local Nginx daemon installation.
Nginx Unit¶
Application Server¶
- unit.nginx.org [ADVANCED LEVEL] [ENTERPRISE-STABLE] β Nginx Unit is a dynamic, polyglot application server engineered to run application code across multiple runtimes (Go, Python, Node.js, PHP) simultaneously. It is entirely controlled via a declarative JSON-based REST API, making it well-suited for container-centric microservices.
π‘ Explore Related: Kubernetes Networking | Servicemesh | Networking