# Contour HTTPS Traffic with HAProxy
**URL:** https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155
**Category:** Help!
**Created:** [April 3, 2026, 1:13pm UTC](https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155 "2026-04-03T13:13:17Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@granth](https://discourse.haproxy.org/u/granth)
#### Post date: [April 3, 2026, 1:13pm UTC](https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155/1 "2026-04-03T13:13:17Z")
I have a httpproxy resource listening on port 443 and I have HAProxy pointing to the LoadBalancer IP of Contour with the following configuration: `:443 check ssl verify none`. When I try to curl the url I setup with HAProxy I get a 503 error. When I use the resolve option for curl I’m able to get a 200 response `curl -k [https://test.com](https://test.com) --resolve [test.com:443](http://test.com:443): -v`. When the HAProxy health check is looking at port 443, the backend shows as down, but if I change the backend to port 80 the backend is up. I’ve confirmed that TLS versions and cipher suites are matched.
HAProxy version: 3.2
---
### Author:  [@gabrielgbs97](https://discourse.haproxy.org/u/gabrielgbs97)
#### Post date: [April 10, 2026, 1:11pm UTC](https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155/2 "2026-04-10T13:11:12Z")
Troubleshooting this will be hard without a minimal config sample. Remove the check keyword, you may have configured httpchk without ssl. Just guessing. Do you have access to stats page?
---
### Author:  [@granth](https://discourse.haproxy.org/u/granth)
#### Post date: [April 13, 2026, 6:21pm UTC](https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155/3 "2026-04-13T18:21:45Z")
This is the config:
backend workload-test-secure\_be
mode http
balance leastconn
option httpclose
option forwardfor
http-response set-header Strict-Transport-Security max-age=31536000;preload
http-response set-header X-Content-Type-Options “nosniff”
server workload-test-nginx :443 check ssl verify none
I tried removing check and it still didn’t work. The backend shows as down on the status page with these settings, but if I change the check to port 80 the backend shows as up but I still get a 503.
---
### Author:  [@granth](https://discourse.haproxy.org/u/granth)
#### Post date: [April 20, 2026, 12:05pm UTC](https://discourse.haproxy.org/t/contour-https-traffic-with-haproxy/12155/4 "2026-04-20T12:05:47Z")
I added `check-sni example.domain.com sni str(example.domain.com)` to the HAProxy configuration to get this working