haproxy copy.cfg

global
        log /dev/log    local0
        log /dev/log    local1 notice  
        daemon

        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL).
        ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL

defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        timeout connect 30
        timeout client  30
        timeout server  30 

frontend localnodes
    bind *:8080
    mode http 
    acl fib path_end -i /fib  
    acl is_health path /health  
    default_backend srvs_index
 
use_backend srvs_fib    if fib 
use_backend health-check if is_health

resolvers kube-dns
  parse-resolv-conf
  hold valid 10s

backend srvs_index   
   server fe1 frontend-gratuitous:8080  check  
   server fe2 frontend:8080 check

backend health-check
    mode http
    errorfile 503 /local-health/health.http
    
backend srvs_fib
    mode http 
    balance roundrobin
    option forwardfor
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }  
    server f1 fib-go-gratuitous:8080 check
    server f2 fib-node-gratuitous:8080 check
    server f3 fib-go-gratuitous:8080 check
    server f4 fib-node-gratuitous:8080 check