On October 20, 2026, AWS launched ECS Gateway, an account-level resource that provisions and manages Application Load Balancers, ACM certificates, WAF rules and security groups for your ECS services. A platform team defines the standard once, an application team connects a service with one line: the per-service ingress bottleneck is gone.
Rapid7 Labs documents “ted”, an implant compiled directly into HAProxy 2.8.12 at two South Korean companies that intercepts web traffic and erases its own connections from the load balancer’s counters. It requires a prior compromise of the host — verify the integrity of your edge binaries and watch connection counters instead of waiting for an HAProxy patch.
HAProxy 3.4 brings dynamic backends with zero-downtime reloads, Traefik 3.7 auto-discovers your containers, and Envoy 1.39 powers Google’s service mesh. Here’s which one to pick and how to configure it for speed instead of drag.
