# Can I sampe data in ACL and use it - in an Action?

**URL:** https://discourse.haproxy.org/t/can-i-sampe-data-in-acl-and-use-it-in-an-action/6255
**Category:** Help!
**Created:** [February 16, 2021, 2:04pm UTC](https://discourse.haproxy.org/t/can-i-sampe-data-in-acl-and-use-it-in-an-action/6255 "2021-02-16T14:04:58Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)
#### Post date: [February 16, 2021, 7:09pm UTC](https://discourse.haproxy.org/t/can-i-sampe-data-in-acl-and-use-it-in-an-action/6255/2 "2021-02-16T19:09:02Z")

</div>

Yes, `ssl_fc_sni` is a sample fetch, that’s means you can use it, in ACL’s and elsewhere.

You most likely DON’T WANT to use it, because you should look at the Host header instead in almost every single case; but that’s another story:

> [@Ssl\_fc\_sni redirect changed from 2.2.5 to 2.2.6](https://discourse.haproxy.org/t/ssl-fc-sni-redirect-changed-from-2-2-5-to-2-2-6/5988):
>
> Hello, up to now I’d configured http-request redirect location https://www.example.com/ code 301 \ if { ssl\_fc\_sni -i example.com } Since updating to 2.2.6 this produces an endless redirect loop because it matches also for host [www.example.com](http://www.example.com)?! I’ve modified this now to http-request redirect location https://www.example.com/ code 301 \ if { ssl\_fc\_sni -i example.com } { hdr(host) -i example.com } My cert is for [www.example.com](http://www.example.com) with an alias for [example.com](http://example.com). I’m using haproxy sinc…

---

_[View the full topic](https://discourse.haproxy.org/t/can-i-sampe-data-in-acl-and-use-it-in-an-action/6255)._
