No, you cannot use ssl_fc_sni
, you need to use req_ssl_sni
instead, and no, you don’t have to break your ssl terminating frontend to multiple ones.
Take a look at the following post for an example (which uses abns sockets but you can just replace them with loopback ports if you want):