anchor.diff:  
       <% end -%>
   <% end -%>
  -
  -<%# CF TCP Routing %>
  +# }}}
  +
  +# TCP Routing  {{{
   <% if_link("tcp_router") do |tcp_router| %>
   frontend cf_tcp_routing
     mode tcp
  
positive.code:         ssl verify none <% end -%>
  
      <% end %>
  
  <%# Routed Backends %>
  
  <% p('ha_proxy.routed_backend_servers').each do |prefix, data| %>
  <% prefix_hash = (Digest::SHA256.hexdigest prefix.to_s)[0..5] %>
  backend http-routed-backend-<%= prefix_hash %>
  
negative.code: 
  <%# HTTPS Frontend %>
  
  <% if ssl_enabled == true -%>
  # HTTPS Frontend
  frontend https-in
      mode http
      bind <%= p("ha_proxy.binding_ip") %>:443 <%= tls_bind_options %>
  
      <% if_p("ha_proxy.cidr_whitelist") do -%>
      acl whitelist src -f /var/vcap/jobs/haproxy/config/whitelist_cidrs.txt
      tcp-request content accept if whitelist
      <% end %>
  