Guys, some applications provided in "black boxes" only accept connections on SSL, port 443. Or some type of company like banks don't want to have traffic in clear, even on their LAN... So you must encrypt traffic.
By the way, stud has now a client mode: https://github.com/bumptech/stud/commit/7330881726e120ba021dc49b076b807acd0752c7 So you can chain stud => haproxy => stud, all of this with the proxy protocol (that said, not sure stud in client mode accept yet the proxy protocol). cheers