ha proxy SNI

haproxy.cfg

global
  log /dev/log    local0
  log /dev/log    local1 notice
  chroot /var/lib/haproxy
  stats socket /run/haproxy/admin.sock mode 660 level admin
  stats timeout 30s
  user haproxy
  group haproxy
  daemon


defaults
  timeout client 30s
  timeout server 30s
  timeout connect 5s


frontend https
  bind *:443
  option tcplog
  log global
  mode tcp

  tcp-request inspect-delay 5s
  tcp-request content accept if { req_ssl_hello_type 1 }

  acl app_homeassistant   req_ssl_sni -i ha
  acl app_homeassistant   req_ssl_sni -i ha.localdomain
  acl app_unifi req_ssl_sni -i ubnt
  acl app_unifi req_ssl_sni -i ubnt.localdomain

  use_backend bknd_homeassistant if app_homeassistant
  use_backend bknd_unifi if app_unifi


backend bknd_homeassistant
  mode tcp
  server snipt-www 127.0.0.1:8123


backend bknd_unifi
  mode tcp
  server snipt-private 127.0.0.1:8443