global
    log stdout format raw local0
    maxconn 4096

defaults
    log global
    mode tcp
    option tcplog
    timeout connect 5s
    timeout client 24h
    timeout server 24h

frontend tls_443
    bind 0.0.0.0:8443
    tcp-request inspect-delay 5s
    tcp-request content accept if { req.ssl_hello_type 1 }

    acl sni_trojan req.ssl_sni -i dc1-tls-676b11.opfo.xyz
    acl sni_anytls req.ssl_sni -i dc1-any-9a4fad.opfo.xyz

    use_backend singbox_trojan if sni_trojan
    use_backend singbox_anytls if sni_anytls
    default_backend decoy_https

backend singbox_trojan
    server trojan dc1-sing-box:34795

backend singbox_anytls
    server anytls dc1-sing-box:40887

backend decoy_https
    server caddy decoy-caddy:443