<![CDATA[Is it possible to have two different shared front-ends with different types?]]>Way back in time, I set up HAProxy to use TCP passthrough via a "shared" front end to multiple back-end domain servers. I call it shared but the "shared" front end setting is not set.

That pseudo shared front end is of type ssl/https (TCP mode).

Yes, I know that doesn't use HAProxy "correctly" since it doesn't offload TLS processing to the proxy.

Now, I have a new domain for which I would like to offload TLS processing. No problem, you might think: just add a new front end of type http/https (offloading) for that domain.

The rub is that I want that new domain to also be proxied on inbound TCP 443 which the existing "shared" front end already listens on.

My question is, is there any way to add a second front end of a different type that listens on an existing HAProxy front end port?

I think the answer is no -- but in case there's something I haven't thought of...

FWIW, I cannot switch the current front end to offloading due to backend server requirements.

Maybe this screenshot will explain better what I would like to acheive.

2026-01-11_07-18-02.png

]]>https://forum.netgate.com/topic/199790/is-it-possible-to-have-two-different-shared-front-ends-with-different-typesRSS for NodeTue, 16 Jun 2026 09:41:18 GMTSun, 11 Jan 2026 12:33:13 GMT60