Add HAProxy TLS routing for HK CMI

2026-09-02 22:11:50 -07:00
parent 1b65bba73a
commit dc04ab9eac
14 changed files with 76 additions and 66 deletions
@@ -0,0 +1,32 @@
+global
+    log stdout format raw local0
+    maxconn 4096
+
+defaults
+    log global
+    mode tcp
+    option tcplog
+    timeout connect 5s
+    timeout client 24h
+    timeout server 24h
+
+frontend tls_443
+    bind 0.0.0.0:443
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req.ssl_hello_type 1 }
+
+    acl sni_anytls req.ssl_sni -i cmi-tls-a7f29c.opfo.xyz
+    acl sni_trojan req.ssl_sni -i conn.opfo.xyz
+
+    use_backend singbox_anytls if sni_anytls
+    use_backend singbox_trojan if sni_trojan
+    default_backend caddy_https
+
+backend singbox_anytls
+    server anytls 127.0.0.1:28443
+
+backend singbox_trojan
+    server trojan 127.0.0.1:32700
+
+backend caddy_https
+    server caddy 127.0.0.1:8443