Failover Exploitation: Abusing Rate Limits to Access Backup Servers

Global rate limiting combined with backup server assumptions can be weaponized: by flooding requests to trigger health check failures, an attacker forces HAProxy failover to expose sensitive data on the backup system. This demonstrates that all servers in a cluster must be secured equally, regardless of their intended role.