1

I am developing an application that needs to expose two services:

I would like to place a reverse proxy in front of these on port 443 that reads the SNI domain and forwards requests to the relevant port.

Is this possible without terminating the TLS connection at the proxy?

2

It is possible to do forwarding inside some proxy just based on the SNI extension in the ClientHello and without terminating SSL at the proxy. It is for example supported by haproxy or sniproxy. See also Can a Reverse Proxy use SNI with SSL pass through?.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.