Configuring dynamic backends based on SNI

Hello,

Is it possible to configure HAProxy to resolve hostnames and forward to a certain IP based on the SNI value? I want to configure something like the following:

Client → HAProxy (resolve SNI value) → Forward to resolved IP

The nginx equivalent configuration would be:

stream {
    resolver 169.254.169.253 ipv6=off;

    server {
        listen 443;
        proxy_pass $ssl_preread_server_name:$server_port;

        ssl_preread on;
    }

}

I have searched the documentation and forums but it seems that the HAProxy configuration requires one to specify a specific backend with either DNS or IP, but this would not work for my use case as I do not know the backend IP and need to resolve the SNI header to get it.

1 post - 1 participant

Read full topic