use haproxy settings from ILO (re #937)
included varnish tweaks from ksp (re #937)