SSHD real-ip behind haproxy
mode tcp, you neet tproxy to pass the original client IP to the server behind
The linked article has a lot of technical background, most of which is not a problem anymore - recent versions of Linux and
haproxy will most likely support tproxy out of the box.
TL;DR in the backend section, try
source 0.0.0.0 usesrc clientip