global
    log stdout format raw local0
    maxconn 4096

defaults
    log global
    mode tcp
    option tcplog
    timeout connect 5s
    timeout client 24h
    timeout server 24h

frontend tls_443
    bind 0.0.0.0:8443
    tcp-request inspect-delay 5s
    tcp-request content accept if { req.ssl_hello_type 1 }

    acl sni_trojan req.ssl_sni -i dc9-tls-e2f48b.opfo.xyz
    acl sni_anytls req.ssl_sni -i sb-dd65a3.kais.cloud
    acl sni_arcane req.ssl_sni -i dc9.kais.cloud

    use_backend singbox_trojan if sni_trojan
    use_backend singbox_anytls if sni_anytls
    use_backend arcane_agent if sni_arcane
    default_backend decoy_https

backend singbox_trojan
    server trojan host.docker.internal:22591

backend singbox_anytls
    server anytls host.docker.internal:43824

backend arcane_agent
    server arcane arcane-agent-caddy:443

backend decoy_https
    server caddy decoy-caddy:443