haproxy2

frontend site1name
	bind			0.0.0.0:443 name 0.0.0.0:443   ssl crt-list /var/etc/haproxy/site1.crt_list
	mode			http
	log			global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	acl			site1	var(txn.txnhost) -m sub -i site1.ddns.org
	acl			aclcrt_site1	var(txn.txnhost) -m reg -i ^site1name\ddns\.org(:([0-9]){1,5})?$
	http-request set-var(txn.txnhost) hdr(host)
	http-request add-header X-Forwarded-Proto https  if   aclcrt_site1name
	use_backend site1_ipvANY  if  site1name aclcrt_site1
	use_backend site1_ipvANY  if   aclcrt_site1

frontend site1name-http
	bind			0.0.0.0:80 name 0.0.0.0:80
	mode			http
	log			global
	option			http-keep-alive
	option			forwardfor
	acl https ssl_fc
	http-request set-header		X-Forwarded-Proto http if !https
	http-request set-header		X-Forwarded-Proto https if https
	timeout client		30000
	acl			site1name-http	var(txn.txnhost) -m sub -i site1.ddns.org
	http-request set-var(txn.txnhost) hdr(host)
	http-request redirect scheme https unless { ssl_fc }
	use_backend site1_ipvANY  if  site1name-http
	default_backend site1name_ipvANY



backend site1name_ipvANY
	mode			http
	id			102
	log			global
	http-check		send meth GET
	timeout connect		30000
	timeout server		30000
	retries			3
	load-server-state-from-file	global
	option			httpchk
	server			site1 192.168.20.11:80 id 103 check inter 1000