TCP mode ACL does not kick in

ACL does not get excuted, seems like with tcp mode cannot match the domain
can someone help please?
frontend drs
mode tcp
bind *:5432
#default_backend backend

    acl sifo_acl hdr(host) -i
    tcp-request inspect-delay 30s
    tcp-request content accept if sifo_acl
    tcp-request content reject

    #acl sifo_acl hdr(host) -i
    acl antinacl hdr(host) -i
    use_backend backend if sifo_acl
    use_backend antinbackend if antinacl

backend backend
mode tcp
server sifoclient

You need mode http to access to the layer7 content, like the host header.

u mean this cannot be done then? if i use http , the DB tool client will not work.
Is there any i can make it work

Then the DB tool client is not using HTTP.

hdr(host) access the Host header in a HTTP request, when in http mode. That’s it.

The DB tool is using port 5432 not port 80/443

Postgresql is not HTTP.