Hi Igor,
> Looks fantastic, could haproxy support this? > > http://googleonlinesecurity.blogspot.com/2014/04/speeding-up-and-strengthening-https.html This doesn't depend on HAProxy, but on OpenSSL. If you compile the 1.0.2-aead branch of OpenSSL git and link haproxy against it, you will have this (but you will use an experimental branch of openssl). For production use I strongly advise against doing this and wait for OpenSSL to merged this branch to a stable branch (probably when 1.0.2 gets released). Regards, Lukas

