Model: replace DNS failover with HAproxy failover

BPB-10

This introduces basic HAProxy support. We only support controlling local
loadbalencers (although multiple are supported!), which is not sufficient
for any robust system.  I suppose you could set up a script to scp files
and reload...