log state changes
log connection

relay "syslog-ext" {
    listen on 37.16.96.150 port 6514
    forward to log01.home.foo.sh port 6514
}

table <ldap_servers> { ldap01.home.foo.sh, ldap02.home.foo.sh }
relay "ldap-int" {
    listen on 172.20.20.6 port 636
    forward to <ldap_servers> check tls
}
relay "ldap-ext" {
    listen on 37.16.96.151 port 636
    forward to <ldap_servers> check tls
}

relay "ldap01-ext" {
    listen on 37.16.96.152 port 636
    forward to ldap01.home.foo.sh port 636
}