My SNI routing does not seem to work - is there some option to debug ACL rule?

[lukastribus]

See:

Extract SNI value for logging in TCP mode

I have already confirmed that this ACL rule works to extract SNI from raw TCP packets. tcp-request inspect-delay 5s tcp-request content accept if { req_ssl_hello_type 1 } acl is_my_domain req.ssl_sni -i www.domain.com tcp-request content capture req.ssl_sni len 100 Note tcp-request content capture req.ssl_sni len 100, my intent is to log the SNI value in access logs, so somehow transmit this information so I can use it in log-format. In log-format, I tried the following but it…

Log SNI in TCP mode

Is it possible to log a request’s SNI in mode tcp? You can access the SNI for routing decisions, so ideally you could access it for logging as well. Currently using version 1.7.8 Ideally something like the following not working config: defaults log global mode tcp balance roundrobin frontend https-in mode tcp tcp-request inspect-delay 3s tcp-request content accept if { req_ssl_hello_type 1 } # ideally could capture the SNI something like this tcp-request content capture req.s…