From d016dcdacfd49b3fc389c3eb9e0227880b6644d4 Mon Sep 17 00:00:00 2001
From: Daniel afx <daniel@deflax.net>
Date: Mon, 7 Feb 2022 06:12:57 +0200
Subject: [PATCH] deny http request

---
 lb/haproxy.cfg | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/lb/haproxy.cfg b/lb/haproxy.cfg
index 7927677..a7dd746 100644
--- a/lb/haproxy.cfg
+++ b/lb/haproxy.cfg
@@ -65,10 +65,7 @@ frontend https
     # IP ACls
     acl is_allowed src -f /usr/local/etc/haproxy/dballowed.acl
 
-    tcp-request connection reject if is_forestdb !is_allowed
-    
-    tcp-request inspect-delay 2s
-    tcp-request content accept if { req_ssl_hello_type 1 }
+    http-request deny if is_forestdb !is_allowed
 
     http-request set-header X-Forwarded-Protocol https
     http-request set-header X-Forwarded-Proto https