I am developing an application that needs to expose two services:

I would like to place a reverse proxy in front of these on port 443 that reads the SNI domain and forwards requests to the relevant port.

Is this possible without terminating the TLS connection at the proxy?

1 Answer 1


It is possible to do forwarding inside some proxy just based on the SNI extension in the ClientHello and without terminating SSL at the proxy. It is for example supported by haproxy or sniproxy. See also Can a Reverse Proxy use SNI with SSL pass through?.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .