# Help with backend

**URL:** <https://discourse.haproxy.org/t/help-with-backend/2144>\
**Category:** Help!\
**Created:** [February 21, 2018, 6:11am UTC](https://discourse.haproxy.org/t/help-with-backend/2144 "2018-02-21T06:11:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![flygirl](https://avatars.discourse-cdn.com/v4/letter/f/dfb087/32.png) [@flygirl](https://discourse.haproxy.org/u/flygirl)\
**Post date:** [February 21, 2018, 6:11am UTC](https://discourse.haproxy.org/t/help-with-backend/2144/1 "2018-02-21T06:11:30Z")

</div>

backend HA\_NODES  
balance roundrobin  
mode http  
option httpchk GET /health\_check.json  
description HA\_NODES  
server app1-stg-7878 10.10.7.31:7878 check fastinter 2000 inter 7000  
server app1-stg-7879 10.10.7.31:7879 check fastinter 2000 inter 7000  
server app2-stg-7878 10.10.7.32:7878 check fastinter 2000 inter 7000  
server app2-stg-7879 10.10.7.32:7879 check fastinter 2000 inter 7000  
acl allow\_port dst\_port 80  
http-request allow if allow\_port

frontend HA\_FRONTEND\_HTTPS  
bind \*:443 ssl crt /etc/ssl/private/code.com.pem  
mode http  
http-request set-header X-Request-Start t=%Ts%ms  
description HA\_FRONTEND\_HTTPS  
default\_backend HA\_NODES  
acl allow\_port2 dst\_port 443  
http-request allow if allow\_port2

frontend HA\_FRONTEND\_HTTP  
bind \*:80  
mode http  
http-request set-header X-Request-Start t=%Ts%ms  
description HA\_FRONTEND\_HTTP  
default\_backend HA\_NODES

Please help with my configuration. I’m new with haproxy.  
I want to allow internal connections for port 80 or 8080 and only allow 443 for my external connection.

This configuration doesn’t restrict anything. I tried commenting out the frontend HA\_FRONTEND\_HTTP part then restarted haproxy service but I can still access it using port 80.