global
    daemon
    maxconn 50000
    user haproxy
    group haproxy
    log 127.0.0.1:514 local0 notice
    stats socket /var/run/haproxy.sock expose-fd listeners

defaults
    log global
    mode http
    option httplog
    option dontlognull
    timeout connect 5s
    timeout check 5s
    timeout client 30s
    timeout server 30s
    timeout http-keep-alive 60s
    option http-keep-alive

frontend stats
    bind <%= scope.function_interface_by_tag(['public', 'address']) %>:8999
    bind *:8999
    mode http
    stats enable
    stats uri /

frontend test
    bind *:9022 ssl crt /etc/ssl/private/haproxy.pem alpn h2,http/1.1
    mode http

    stick-table type string size 10k store gpc0
    http-request set-var(sess.src_port) src_port
    http-request set-var(sess.source) src,concat(:,sess.src_port)
    http-request track-sc0 var(sess.source)
    http-request sc-inc-gpc0

    acl exceeded_connection sc0_get_gpc0 ge 10000
    acl reset sc0_clr_gpc0 ge 0

    http-response set-header Connection close if exceeded_connection reset

    acl is_authorized hdr(Authorization) "something"
    http-request deny if !is_authorized

    default_backend test

backend test
    balance roundrobin
    http-reuse always
    mode http
    option tcp-check
    option srvtcpka
    srvtcpka-intvl 60s
    srvtcpka-cnt 3
    http-response del-header Connection