have separate sites listen on unique ports on VIP too to avoid dependency on DNS
(horizon -> 443, kibana -> 5601, graphite -> 8888, zabbix -> 7777)