# Mode TCP domain acl

**URL:** <https://discourse.haproxy.org/t/mode-tcp-domain-acl/9089>\
**Category:** Help!\
**Created:** [October 4, 2023, 2:06pm UTC](https://discourse.haproxy.org/t/mode-tcp-domain-acl/9089 "2023-10-04T14:06:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Melv1n](https://avatars.discourse-cdn.com/v4/letter/m/0ea827/32.png) [@Melv1n](https://discourse.haproxy.org/u/Melv1n)\
**Post date:** [October 4, 2023, 2:06pm UTC](https://discourse.haproxy.org/t/mode-tcp-domain-acl/9089/1 "2023-10-04T14:06:30Z")

</div>

Hello, i need help 😕 !  
I try to proxying my rdp virtual machine on proxmox  
this is my current configuration of haproxy.  
i know in tcp mode acl with hdr(host) not work because we not use http.  
So how can i do for in function of the dns i ask be redirected to the good backend ?

thanks

```auto

frontend rdp
  mode tcp
  bind *:3389
  acl kali-200 req.payload(0,4) -m str kali.x.fakdomain
  acl windows-300 req.payload(0,4) -m str sli.x.fakdomain
  use_backend windows if windows-300
  use_backend kali if kali-200

backend kali
  mode tcp
  server kali-200 192.168.1.5:3389

backend windows
  mode tcp
  server windows-300 192.168.1.20:3389

```

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [October 4, 2023, 4:22pm UTC](https://discourse.haproxy.org/t/mode-tcp-domain-acl/9089/2 "2023-10-04T16:22:07Z")

</div>

You cannot.

hdr(hosts) access the Host header in the HTTP protocol, requiring thus the HTTP protocol.  
SNI matching accesses the SNI value in the SSL client hello, requiring thus SSL.

None of this is related to RDP.