SNI routing based on wildcard domains

[yrutschle]

    Would be interesting if it is possible to do SNI routing based on wildcard domains, like sending all requests with example.com or *.example.com to one server.

I was trying to do the same with my OPNsense router and it seems impossible to configure that way.

Originally posted by @poVoq in #350 (comment)

[yrutschle]

yes, but for next version :-)
thanks for the suggestion

[yrutschle]

actually it does seem to work, the SNI matching uses glob (shell) matching so this:

protocols: (
[...]
 { name: "tls"; sni_hostnames: [ "*.example.org"]; host: "localhost"; port: "443"; },
[...]
);

does what you would expect. Obviously this becomes a catch-all for that domain, so if you have other forwarding targets for more specific sub-domains, they need to come first.