Is there a way for haproxy to listen to port 443 and perform ssl pass through 
via tcp if the hostname matches certain criteria but ssl termination for the 
rest?


for example, this is the front end configuration part:


frontend ssl :443

   mode tcp

   option tcplog

   option socket-stats

   maxconn 300


   # use tcp content accepts to detects ssl client and server hello.

    # acl clienthello req_ssl_hello_type 1 -> seems to not work


    tcp-request inspect-delay 5s

    tcp-request content accept if { req_ssl_hello_type 1 }


    use_backend ssl_dev if { req_ssl_sni -i dev.company.com  }

    use_backend ssl_test if { req_ssl_sni -i test.company.com  }

    default_backend ssl_termination?

Reply via email to