HAProxy had incorrect IPA certificate for staging. I'm not sure how that even worked, but the issue was revealed when the IAD2 machines were removed from cluster.