yes, my acl does only match path /sabrix because i just want export /sabrix. there is no /favicon to be published .
i although think /favicon error can be ignored because the error still was recorded when i append ssl check-ssl verify none to haproxy.cfg and the visit was successful . just like this.
/////////////////////////////////////////////////////////////////////////////////////////////////////////
2020-12-06T12:14:57+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 GET /sabrix/ HTTP/1.1
2020-12-06T12:14:58+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 GET /sabrix/JavaScriptServlet HTTP/1.1
2020-12-06T12:14:58+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 POST /sabrix/JavaScriptServlet HTTP/1.1
2020-12-06T12:15:10+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 GET /sabrix/ HTTP/1.1
2020-12-06T12:15:10+08:00 localhost haproxy[24866]: GET /favicon.ico HTTP/1.1
2020-12-06T12:15:20+08:00 localhost haproxy[24866]: 503 GET /favicon.ico HTTP/1.1
2020-12-06T12:16:12+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 GET /sabrix/ HTTP/1.1
2020-12-06T12:16:12+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 GET /sabrix/JavaScriptServlet HTTP/1.1
2020-12-06T12:16:12+08:00 localhost haproxy[24866]: 10.99.22.218:443 200 POST /sabrix/JavaScriptServlet HTTP/1.1
2020-12-06T12:16:18+08:00 localhost haproxy[24866]: 503 GET /favicon.ico HTTP/1.1
/////////////////////////////////////////////////////////////////////////////////////////////////////////
but when i edit retries from 1 to 3 , 503 error can be disapeared ( with "ssl check-ssl verify none ) .
if without ssl check-ssl verify none , retries doesn’t work.
i also checked favicon elements in explorer with clicking F12, it just a icon in the default page just like https://***.tst.com/sabrix/favicon.ico
haproxy didn’t disabled the /sabrix backend before.
The issue still exists after i tried many times and it can be reproduced even i wait for long enough.