Proxy TCP connections based on static rules, HTTP Host headers, and SNI server names (Go package or binary)
Browse cluster: Cluster 167 →tcpproxy is a Go package and binary for proxying TCP connections based on static rules, HTTP Host headers, and TLS SNI (Server Name Indication) server names. The project includes TLSRouter, a TLS proxy that routes incoming connections to backend servers by inspecting the SNI value from the TLS handshake, without decrypting the traffic. TLSRouter supports flexible hostname matching through DNS wildcards and RE2 regular expressions, and can optionally forward client IP information via the HAProxy PROXY protocol. The project is available both as a Go library and as a command-line tool configured through a simple configuration file.