I need HAProxy to respond with a deny whenever the end user types in the HAProxy VIP into the browser. What is happening instead, is the end user is presented with the first ACL in the list, thus getting a wrong SSL cert, etc. This is very similar to Do not allow visits on haproxy IP address - Serve…

Deny access for HAProxy VIP address

lukastribus June 15, 2023, 5:26pm 3

strict-sni is what you want.

Topic		Replies	Views
Haproxy as reverse HTTPS proxy Help!	13	8105	August 20, 2018
Need help with HAPROXY https when apps share the SSL cert Help!	2	310	August 25, 2023
Exclude backends from http auth HAProxy 1.5 Help!	1	630	June 27, 2021
Ssl certificate verify on specific domain with SNI Help!	7	4752	October 5, 2017
HTTPS SNI on non-standard port not sending to correct backend Help!	2	2193	March 24, 2017