@rqsd one good giveaway is that it constantly logs that a s2s connection has been disconnected, which in reality is just haproxy polling whether the backend server is alive in the first place. I don't want to expose the server directly to the internet though, so I'll just have to work around that.