I am developing an application that needs to expose two services:
- REST API with https and client certificate authentication (https://api.device.example.org:4431, server certificate issued by private CA)
- Web server with regular https (https://device.example.org:4432, server certificate issued by public CA)
I would like to place a reverse proxy in front of these on port 443 that reads the SNI domain and forwards requests to the relevant port.
Is this possible without terminating the TLS connection at the proxy?