diff --git a/lb/haproxy.cfg b/lb/haproxy.cfg index 7927677..a7dd746 100644 --- a/lb/haproxy.cfg +++ b/lb/haproxy.cfg @@ -65,10 +65,7 @@ frontend https # IP ACls acl is_allowed src -f /usr/local/etc/haproxy/dballowed.acl - tcp-request connection reject if is_forestdb !is_allowed - - tcp-request inspect-delay 2s - tcp-request content accept if { req_ssl_hello_type 1 } + http-request deny if is_forestdb !is_allowed http-request set-header X-Forwarded-Protocol https http-request set-header X-Forwarded-Proto https