# HAProxy 1.6, Backend SNI not working in my implementation

**URL:** <https://discourse.haproxy.org/t/haproxy-1-6-backend-sni-not-working-in-my-implementation/435>\
**Category:** Help!\
**Created:** [June 11, 2016, 8:23am UTC](https://discourse.haproxy.org/t/haproxy-1-6-backend-sni-not-working-in-my-implementation/435 "2016-06-11T08:23:34Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [June 12, 2016, 5:15am UTC](https://discourse.haproxy.org/t/haproxy-1-6-backend-sni-not-working-in-my-implementation/435/2 "2016-06-12T05:15:49Z")

</div>

The health check is the problem. The health check does not send the SNI header, while regular traffic would correctly handle it (disable health checking or revert to layer 4 health check would work around this problem).

Also see:

> [@Can 1.6 do SNI on backend?](http://discourse.haproxy.org/t/can-1-6-do-sni-on-backend/278/11):
>
> This works (SNI is set to [private.auricsystems.com](http://private.auricsystems.com) and the returned certificate is validated against the hostname [private.auricsystems.com](http://private.auricsystems.com)): server test private.auricsystems.com:443 ssl sni str(private.auricsystems.com) verifyhost private.auricsystems.com ca-file \</etc/ca-file\> Haproxy refuses to connect if the hostname is something else: server test private.auricsystems.com:443 ssl sni str(private.auricsystems.com) verifyhost mail.com ca-file \</etc/ca-file\> But you are right about one thing…

[https://www.mail-archive.com/haproxy@formilux.org/msg22938.html](https://www.mail-archive.com/haproxy@formilux.org/msg22938.html)

---

_[View the full topic](https://discourse.haproxy.org/t/haproxy-1-6-backend-sni-not-working-in-my-implementation/435)._