hm  since we have separate processes  one per listener  we cannot assume that we can only monitor the amphora at this level my assumption is restarting the haproxy process would be handled by the agent and would happen before the agent reports a listener issue to the health manager  i am assuming that if the agent reports to the controller that the listener is failed it has exhausted the recovery options it has available and it needs the controller to fail over the listener 