https handled by haproxy (or not :) )

gistfile1.txt

listen front
  bind :443
  mode tcp
  tcp-request inspect-delay 2s
  tcp-request content accept if { req_ssl_hello_type 1 }
  acl is_host1 req.ssl_sni -n host1.example.com
  use_backend bk_host1 if is_host1
  server local 127.1:1443 send-proxy
 
frontend ssl
  bind 127.1:1443 ssl npn http/1.1 crt foo.pem accept-proxy
  default_backend bk_http

backend bk_host1
# https servers go here

backend bk_http
# http server goes here