diff --git a/haproxy.cfg b/haproxy.cfg
index e7c82c0..c492466 100644
--- a/haproxy.cfg
+++ b/haproxy.cfg
@@ -57,6 +57,7 @@ backend letsencrypt
 # HTTP (port 80, anycast)
 frontend http-ac-in
 	bind 198.251.90.114:80
+	bind 198.251.90.89:80
 	mode http
 	reqadd X-Forwarded-Proto:\ http
 
@@ -75,6 +76,7 @@ frontend 443-in
 	bind 209.141.34.95:443 tfo ssl crt /etc/haproxy/certs
 	bind [2605:6400:20:e6d::1]:443 tfo ssl crt /etc/haproxy/certs
 	bind 198.251.90.114:443 tfo ssl crt /etc/haproxy/certs/uncensored.any.dns.nixnet.xyz.pem
+	bind 198.251.90.89:443 tfo ssl crt /etc/haproxy/certs/uncensored.any.dns.nixnet.xyz.pem
 	mode http
 
 	http-response set-header X-Frontend lv1
@@ -102,6 +104,7 @@ frontend 853-in
 
 frontend 853ac-in
 	bind 198.251.90.114:853 tfo ssl crt /etc/haproxy/certs/uncensored.any.dns.nixnet.xyz.pem
+	bind 198.251.90.89:853 tfo ssl crt /etc/haproxy/certs/uncensored.any.dns.nixnet.xyz.pem
 	mode tcp
 
 	# DoT