bind *:443 ssl crt /etc/some/cert.pem
# Route based on source ip
# acl network_allowed src 1.1.1.1 2.2.2.2
# tcp-request connection reject if !network_allowed
# acl block_1 src 192.167.0.0/16
# acl block_2 src 192.168.0.0/16
# use backend block_1_hosts if block_1
# use backend block_2_hosts if block_2
server node1 10.10.0.11:12345 check
server node2 10.10.0.12:12345 check
server node3 10.10.0.13:12345 check