configure sysctl before haproxy