> before going any deeper in investigating the behaviour I would suggest > to configure this setup with using redirection. > I think you are better with just forwarding on layer 3. > > Or did I miss something? Why did you choose relay here?
relayd is used here as tls termination proxy, since varnish does not support tls.