HAProxy backend config for Istio Ingress

backend httpbin
    balance roundrobin
    mode http

    server master 192.168.50.10:32009 check check-sni httpbin.example.com sni str(httpbin.example.com) ssl verify none

    http-request set-header Host httpbin.example.com
    http-request set-header X-Forwarded-For %[src]
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request add-header X-Forwarded-Proto https if { ssl_fc }