SNI Proxy

What SNI Proxy is

SNI Proxy is free, self-hosted software that routes incoming HTTP and TLS connections based on the hostname in the initial request of a TCP session. It can direct HTTPS traffic by name without decrypting it, and the proxy machine needs no keys or certificates. Routing rules can match exact hostnames or regular expressions, with a fallback server available when a request has no hostname. A single instance can use multiple listening sockets; listeners and backend servers support IPv4, IPv6, and Unix domain sockets. HAProxy proxy protocol support passes the original source address to backend servers. The software supports TLS and HTTP, but not HTTP/2 hostname multiplexing or HTTP/3 over QUIC. Hostname and wildcard configuration entries require a build with UDNS. The maintainer recommends a local caching DNS resolver with UDNS because queries from its single UDP socket can be relatively easy to spoof. The project is deprecated, and the maintainer says issue and email replies should not be expected unless a problem is significant for security or reliability. It is licensed under BSD-2-Clause and uses file-based configuration.