HAProxy marks a backend server DOWN when its configured health-check contract fails often enough. That result does not, by itself, prove the application is unavailable to every client. A direct browser request may use another hostname, port, protocol, network path, source address, TLS identity, HTTP method, URI, ...