haproxy needs to be configured and running early on