2020-10-02 20:04:44 -05:00
|
|
|
frontend sni
|
|
|
|
log global
|
|
|
|
mode tcp
|
2020-10-02 20:19:12 -05:00
|
|
|
option tcplog
|
2020-10-02 20:04:44 -05:00
|
|
|
tcp-request inspect-delay 5s
|
2020-10-02 21:00:30 -05:00
|
|
|
tcp-request connection set-src src,ipmask(16,56)
|
2020-10-02 20:04:44 -05:00
|
|
|
tcp-request content accept if { req_ssl_hello_type 1 }
|
|
|
|
|
|
|
|
bind ${BIND_V4}:443
|
|
|
|
bind ${BIND_V6}:443
|
|
|
|
use_backend %[req_ssl_sni,lower,map(/usr/local/etc/haproxy/sni.map)]
|