The State of SSL Stacks

The SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.

HAProxy Technologies
@bagder grml… it mentions LibreSSL only at the beginning but doesn’t consider it later or elaborate more on it (it’s my current goal for lower- to low-end scenarios)
@mirabilos We consider that LibreSSL is a really good implementation for small use-cases, but it wasn't performant enough nor complete enough to be considered as a replacement of OpenSSL for most haproxy users. However we will still support this library and will be happy to improve its support within haproxy.
@sekh ah ok, fair; thanks