Module ngx_stream_ssl_preread_module

The ngx_stream_ssl_preread_module module (1.11.5) allows extracting information from the ClientHello message without terminating SSL/TLS, for example, the server name requested through SNI or protocols advertised in ALPN. This module is not built by default, it should be enabled with the --with-stream_ssl_preread_module configuration parameter. Selecting an upstream based on server name: map $ssl_

[fcicq]

sni based forwarding, ssl_preread on; proxy_pass $ssl_preread_server_name:443 or use map. nginx 1.11.5+. $ssl_preread_protocol in 1.15.2+ (see sslh to modify?) alpn_protocols (1.13.10+)