anchor.diff:      frontend tcp-frontend_<%= tcp_proxy["name"]%>
       mode tcp
   <% if tcp_proxy["ssl"] %>
  -    bind :<%= tcp_proxy["port"] %> ssl crt /var/vcap/jobs/haproxy/config/cert.pem no-sslv3 ciphers <%= p("ha_proxy.ssl_ciphers") %>
  +    bind :<%= tcp_proxy["port"] %> ssl crt /var/vcap/jobs/haproxy/config/ssl no-sslv3 ciphers <%= p("ha_proxy.ssl_ciphers") %>
   <% else %>
       bind :<%= tcp_proxy["port"] %>
   <% end %>
  
positive.code:   acl routed_backend_<%= prefix_hash %> path_beg <%= prefix %>
    use_backend http-routed-backend-<%= prefix_hash %> if routed_backend_<%= prefix_hash %>
  <% end %>
      reqadd X-Forwarded-Proto:\ https
  <% end %>
  
  <%# HTTPS Websockets Frontend %>
  
negative.code: <% if p("ha_proxy.enable_4443") == true %>
  frontend wss-in
      mode http
      bind :4443 ssl crt /var/vcap/jobs/haproxy/ssl no-sslv3 ciphers <%= p("ha_proxy.ssl_ciphers") %>
      default_backend http-routers
  <%
  if_p("ha_proxy.headers") do |headers|
  