TLS ServerName extension during ssl-hello-chk

[lukastribus]

In haproxy 1.6 release we can send a certain SNI value, but not when health checking:

Can 1.6 do SNI on backend?

Thanks for the clarification. I was so focused on the health checks failing that I did not consider that it would work without the health check. I’ll document this thread and issue a ticket. –Ray

You will have to use an external check for this:
https://cbonte.github.io/haproxy-dconv/1.6/configuration.html#external-check%20(Process%20management%20and%20security)