So I am trying to set some new rules - since I don't have anything hand to echo requests back to me, I'm using http-response add-header so I can verify my rules work with curl.
Added to haproxy.cfg: acl test_origin hdr(X-TEST-IP) -m ip -f /etc/haproxy/acl/test.acl http-response add-header X-Test test http-response add-header X-Test internal if test_origin #http-request deny if test_origin Added to /etc/haproxy/acl/test.acl 127.0.0.3 I expect that when I do: curl -vvv -H "X-TEST-IP: 127.0.0.3" http://127.0.0.1:4089/ That I would get a response that included two X-Test headers - however I am only seeing the first one. "X-Test: test". If I uncomment the "deny" rule then the request will be denied, so I believe the the acl is working. If I change the "if test_origin" to "if !test_origin" then I'll see the second header, so I think the if is being parsed at least. However I don't know why I'm not seeing the header in the case above.

