relayd.conf

        match header set "X-Forwarded-For" value "$REMOTE_ADDR"
        match header set "X-Forwarded-By" value "$SERVER_ADDR:$SERVER_PORT"
        match header set "Keep-Alive" value "$TIMEOUT"
        pass
        tls keypair "relayd"
}

relay "betls" {
        listen on $ext_addr port https tls
        protocol "backend"
        forward to <backend> port https mode loadbalance check script "/usr/local/bin/checkbackend.sh"
}