> I'm checking byte 0 and 2, not 0 and 1, so it's more 80??01 True.
You could combine anonymous ACLs:
use_backend bk2 if { payload(0,1) -m bin 80 } { payload(2,1) -m bin 01 }
You may just wanna try:
use_backend bk2 if { req_ssl_ver 2}
But that may do some additional checks, or check in different
layers (hello version vs record layer version). So it depends
what exactly you wanna match.
Lukas

