.QAT cannot be used for TLS offload or acceleration mode together with SSL set Enabling QAT on HAProxy with SSL enabled injects legacy OpenSSL engine directives. The legacy OpenSSL engine path breaks the TLS handshake, emitting the `tlsv1 alert internal error` error. With the TLS handshake broken, the TLS termination fails. As a workaround, disable the QAT at HAProxy in order to keep the TLS handshake. Set the configuration file specifications as follows: * `haproxy_qat_support: false` * `ssl: true` As a result, QAT is disabled and the HAProxy TLS works as expected. NOTE: Under heavy connection rates higher CPU usage may be seen versus QAT-offloaded handshakes.