Backwards Compatibility Support for 4443

Adds backwards compatibility support for port 4443 via ha_proxy.enable_4443: true to make transitioning off the older cf-release based haproxy easier in production.

Updated Configs

Addressed an issue causing block lines to be repeated in the configs when multiple domains were listed in haproxy.internal_only_domains.

Initial Release

BOSH Release for cf-haproxy

This BOSH release is an attempt to get a more customizable/secure haproxy release than what is provided in cf-release.

It adds the following features:

• blacklisting internal-only domains, to prevent Host header spoofing
• fine-graned timeout configurations for http, https, and websocket connections
• no tcp-mode proxying, just HTTP proxying, to prevent backdoors around Host header spoofing.