Skip to content

Rules & Checks

Navigate to Services -> HAProxy -> Settings

  • Click 🔽 next to Rules & Checks
  • Click Health Monitors
  • Click
  • Name: SSL Check
  • Check type: SSL
  • SSL preferences: Use server settings
  • Check interval: 2s

haproxy-sni-ssl-check

  • Click Save
  • Click Apply

Navigate to Services -> HAProxy -> Settings

  • Click 🔽 next to Rules & Checks
  • Click Conditions
  • Click
  • Name: Contains SSL Hello Message
  • Condition Type: SSL Hello Type
  • SSL Hello Type: 1-client-hello

haproxy-sni-condition-contains-ssl-hello

  • Click Save
  • Click Apply
  • Click
  • Name: sni-example1_com
  • Description: SNI Match all example1.com domain
  • Condition type: SNI TLS extension contains (TCP request content inspection)
  • SNI Contains: example1.com

haproxy-sni-condition-sni1

  • Click Save
  • Click Apply
  • Click
  • Name: sni-example1_com
  • Description: SNI Match all example1.com domain
  • Condition type: SNI TLS extension contains (TCP request content inspection)
  • SNI Contains: example2.com

haproxy-sni-condition-sni2

  • Click Save
  • Click Apply

Navigate to Services -> HAProxy -> Settings

  • Click 🔽 next to Rules & Checks
  • Click Rules
  • Click
  • Name: TCP Inspect Delay
  • Execute function: tcp-request inspect-delay
  • TCP inspection delay: 5s

haproxy-sni-tcp-inspect-delay

  • Click Save
  • Click Apply
  • Click
  • Name: Accept Content if Contains SSL Hello
  • Select conditions: Contains SSL Hello Message
  • Execute function: tcp-request content accept

haproxy-sni-rule-accept-hello-message

  • Click Save
  • Click Apply
  • Click
  • Name: rule-example1_com
  • Select conditions: sni-example1_com
  • Execute function: Use specified Backend Pool
  • Use backend pool: example1_pool

haproxy-rule-backend1

  • Click Save
  • Click Apply
  • Click
  • Name: rule-example1_com
  • Select conditions: sni-example2_com
  • Execute function: Use specified Backend Pool
  • Use backend pool: example2_pool

haproxy-rule-backend2

  • Click Save
  • Click Apply