only primary haproxy should sync and deploy