user daemon pidfile /tmp/sniproxy.pid error_log { syslog daemon priority notice } listener 127.0.0.1:443 { protocol tls table TableName # Specify a server to use if the initial client request doesn't contain # a hostname fallback 192.0.2.5:443 } table TableName { # Match exact request hostnames example.com 192.0.2.10:4343 # If port is not specified the listener port will be used example.net [2001:DB8::1:10] # Or use regular expression to match .*\\.com [2001:DB8::1:11]:443 # Combining regular expression and wildcard will resolve the hostname # client requested and proxy to it .*\\.edu *:443 }