SNI Proxy with TLS passthrough

[ragchuck]

Hi everyone,

I'm looking for a SNI Proxy feature in godoxoy, maybe someone can help.

I have two sites, each site manages their own TLS certificate (incl. wildcard):

site1.domain.tld . . .<vpn> . . . site2.domain.tld

• Each site has their own applications running (-> wildcard domain, e.g. *.site1.domain.tld).
• Each site-network has a local DNS (technitium) that resolves *.domain.tld to their proxy host ip.
• When I try binding 443 for a TCP route I get an error listen tcp4 0.0.0.0:443: bind: address already in use
• When I try using a http route the default certificate of site1 is provided, which doesn't match site2.domain.tld
• I'd like to avoid having similar certificates for bot sites on each proxy --> thus: tcp with TLS passthrough

---

In Traefik I can do this:

# site1 config
tcp:
  routers:
    site2:
      rule: HostSNIRegexp(`^.+\.site2\.domain\.tld$`)
      entryPoints:
        - websecure
      tls:
        passthrough: true
      service: site2
      priority: 10

  services:
    site2:
      loadBalancer:
        servers:
        # internal routing through tailnet
        - address: "100.64.0.10:443"

With the priority set I ensure this route is evaluated before other http routes.

Is something similar possible with Godoxy?

[yusing]

Currently not possible, created new issue #218. Locking this now.