HAProxy transparent SSL balancing... Banging my head against the wall.

[thehedgefrog]

I have a relatively simple home setup where I have a Kubernetes cluster running on 3 servers, and itself uses Traefik v2 as an ingress. I used relayd on previous versions of pfSense but could no longer hold off on the upgrade, so I'm trying to replicate it in HAProxy, and it's not working.

I need it to be as stupid simple as possible - no SSL termination, just simple round robin forwarding from my virtual WAN IP 10.200.12.24 to my 3 servers 10.200.150.1-2-3, where port 80/443/6443 go to the respective server port.

While 6443 works perfectly in TCP mode, 80 and 443 create 500 errors when I try to access my servers. My 80/443/6443 frontends are set to TCP mode, listening on my virtual IP, no other options and going to my backends, which have all 3 servers, round robin, Encrypt set to No, and nothing else checked.

There are no good tutorials and troubleshooting guides I can find related to the pfSense GUI version, so please help me out here, I have no idea how doing something so simple can be this complicated. Relayd was a 10 second setup and never let me down.

Thanks!