Haproxy-auth-request – HTTP access control using subrequests

In plain words

Haproxy-auth-request is an HTTP access control tool that uses subrequests to authenticate users accessing multiple virtual hosts behind HAProxy. It offers an alternative to TLS client certificates and HTTP authentication methods, allowing administrators to protect internal services without the usability issues or credential distribution challenges of traditional approaches. The tool was designed to centralize authentication for a group of users across multiple vHosts.

written from the facts on this page · September 2026

From the sources

For a project of mine I needed to authenticate a medium number of vHosts behind an haproxy to the same group of users. I usually use TLS client certificates to protect internal services only I (or a small number of technically savy people) need to access. But they come with some serious issues in usablity, so I quickly disregarded them. Another popular choice is HTTP authentication (“ .htaccess ”), but that would require setting up and securely distributing credentials to the users that need to access the vHosts. On top of that the haproxy documentation discourages using hashed passwords, because the hash algorithms are designed to be CPU intensive and thus would block haproxy's event loop.…from bl.duesterhus.eu

• CI
  CRProxy is a simple and affordable ngrok alternative2022 · crproxy.com · ▲63

  CRProxy is a new reverse web proxy service. We have a generous free plan that includes the ability to use custom domains and semi-custom sub-domains. We have reasonably priced plans with good bandwidth and no additional usage charges. Please give it a try and let me know what you think. Thank you, David

• 
  Broxy – An HTTP/HTTPS intercept proxy written in Go2020 · github.com · ▲106

  An HTTP/HTTPS intercept proxy written in Go. Contribute to rhaidiz/broxy development by creating an account on GitHub.

• 
  A simple SMTP proxy that bridges legacy software to modern SMTP servers2017 · github.com · ▲47

  mailproxy is a simple SMTP proxy. It receives emails through an unencrypted, unauthenticated SMTP interface and retransmits them through a remote SMTP server that requires modern features such as encryption and/or authentication. mailproxy is primarily useful for enabling email functionality in lega

• 
  We’re open-sourcing Requestly - HTTP debugging proxy for Web and Mobile2023 · github.com · ▲54

  Hey HN! We’ve open-sourced Requestly (https://github.com/requestly/requestly) - A network debugging proxy for web & mobile apps. Requestly intercepts all HTTP(s) requests & responses and provides full control to developers to modify the request/response like rewriting request URL to hit different environment or returning different response for APIs/scripts. In addition to HTTP(s) interception & modification capabilities, Requestly also offers Mock Server [0] & recording the browser sessions [1] with video, console logs, & network logs stitched together. We use…

• 
  inProxy2020 · ▲65

  Free Cross-platform Web Debugging and Mocking tool

• HB
  HAProxy back end controller/scaler, supports AWS ASG and Consul2020 · elasticpyproxy.readthedocs.io · ▲12

• 
  SimCity, but with Permits▲873

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 21h ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 13d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 14d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 8d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 12d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 22d ago · space.bl2.net

• 
  Buy Me a Coffee▲1,411

  A simple, meaningful way to fund your creativity.

  Growth · 2018 · buymeacoffee.com

• 
  Robinhood Crypto▲1,208

  Zero-fee cryptocurrency trading from Robinhood 💸

  Commerce · 2018

• 
  Launchaco 2.0 🦄▲1,113

  Simple landing pages for your startup

  Dev tools · 2018

• 
  Indie Hackers Community▲1,095

  Work together to build profitable businesses & side projects

  Work · 2018 · indiehackers.com

• 
  Typeform 2.0▲793

  Build beautiful conversational forms, surveys and more

  Life & fun · 2018 · typeform.com

• 
  Resume.io▲731

  Build your job-winning resume in minutes

  Work · 2018 · resume.io