Home / Marketplace / HAProxy on AlmaLinux 9

HAProxy on AlmaLinux 9

HAProxy on AlmaLinux 9 delivers the de-facto standard open-source load balancer on an enterprise-grade RHEL-compatible base. This image gives you a production-ready deployment within minutes of first boot — no dependency wrangling, no manual hardening checklist. Published and maintained by Derek Coleman & Associates Inc: freshly rebuilt against current security advisories and deployable straight from the Azure Marketplace into your own subscription.

Get it on Azure Marketplace Deploy on Azure Support & quick start

Version: HAProxy (AlmaLinux 9 AppStream package)Platform: AlmaLinux 9Ports: 8404 (stats page — the baseline config binds `*:8404`, unauthenticated; the 2026-09-15 image sweep proved it only on 127.0.0.1 from inside the VM. Treat it as loopback-only until you open 8404 in the NSG to your own IP and confirm it answers); 80 and 443 are opened in firewalld but NO frontend listens on them until you add oneCategory: Web & Proxy

What's included

HAProxy latest installed from the official upstream source
AlmaLinux 9 base with automatic security updates enabled
No shared or default passwords baked into the image
Trusted Launch support: Secure Boot + vTPM
Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
Allow inbound SSH (22) for yourself plus the application port(s): 8404 (stats) to your IP only, plus 80/443 once you configure frontends — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
Confirm HAProxy is up from the VM: `curl -sI http://127.0.0.1:8404/` returns 200 (the stats page); to view it in a browser open 8404 in the NSG to your IP only. Then add frontend/backend definitions to /etc/haproxy/haproxy.cfg.
Validate (`haproxy -c -f /etc/haproxy/haproxy.cfg`) and reload (`sudo systemctl reload haproxy`).

Common use cases

TCP and HTTP load balancing
TLS termination and SNI routing
Blue/green and canary traffic splitting
High-availability front door for app tiers

Why our images

Freshly rebuilt against the latest security advisories, no shared default credentials, Trusted Launch support, and automatic OS security updates — everything runs in your own Azure subscription under your governance.

Need help?

Product support page
support@dcassociatesgroup.com
Contact form