SNI Proxy can proxy both incoming HTTP and TLS connections based on the hostname that is contained within the initial request of that TCP session. This feature allows HTTPS name-based virtual hosting to be used on separate back-end servers without installing a private key on the proxy machine. It also lifts the TLS restriction of one IP per certificate.<\/p>\n

This article will explain how to set up a SNI Proxy server. It was written for Debian 7 x64. SNI Proxy is open source software written by Dustin Lundquist.<\/p>\n

Install SNI Proxy<\/h3>\n

Update your Debian system.<\/p>\n

apt-get update && apt-get dist-upgrade\r\n<\/code><\/pre>\n
Install the required dependencies.<\/p>\n
apt-get install autotools-dev cdbs debhelper dh-autoreconf dpkg-dev gettext libev-dev libpcre3-dev pkg-config git -y\r\n<\/code><\/pre>\n
Install udns.<\/p>\n
mkdir udns\r\ncd udns\r\nwget http:\/\/ftp.de.debian.org\/debian\/pool\/main\/u\/udns\/udns_0.4-1.dsc \r\nwget http:\/\/ftp.de.debian.org\/debian\/pool\/main\/u\/udns\/udns_0.4.orig.tar.gz\r\nwget http:\/\/ftp.de.debian.org\/debian\/pool\/main\/u\/udns\/udns_0.4-1.debian.tar.gz\r\ntar xfz udns_0.4.orig.tar.gz\r\ncd udns-0.4\/\r\ntar xfz ..\/udns_0.4-1.debian.tar.gz\r\ndpkg-buildpackage\r\ncd ..\r\ndpkg -i *.deb \r\n<\/code><\/pre>\n
Install SNI proxy.<\/p>\n
git clone https:\/\/github.com\/dlundquist\/sniproxy\r\ncd sniproxy\r\n.\/autogen.sh && .\/configure\r\nmake && make install\r\n<\/code><\/pre>\n
Configure SNI proxy<\/h3>\n
Edit the\u00a0\/etc\/sniproxy.conf<\/code>\u00a0file. You can add sites that you want to proxy by using wildcards. See the example below.<\/p>\n
user nobody\r\npidfile \/var\/run\/sniproxy.pid\r\nerror_log {\r\n    syslog deamon\r\n    priority notice\r\n}\r\nlisten 80  {\r\n    proto http\r\n    table hosts\r\n}\r\nlisten 443 {\r\n    proto tls\r\n    table hosts\r\n}\r\ntable hosts{\r\n    .*\\.google\\.com$ *\r\n    .*\\.google\\.com\\.hk$ *\r\n    google.com google.com\r\n    google.com.hk google.com.hk\r\n}\r\n<\/code><\/pre>\n
Once you have finished configuring your server, start SNI Proxy with the following command.<\/p>\n
sniproxy\r\n<\/code><\/pre>\n
Enjoy!<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","manualknowledgebasecat":[109,233,242],"manual_kb_tag":[468],"_links":{"self":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2943"}],"collection":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/comments?post=2943"}],"version-history":[{"count":1,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2943\/revisions"}],"predecessor-version":[{"id":2944,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2943\/revisions\/2944"}],"wp:attachment":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/media?parent=2943"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manualknowledgebasecat?post=2943"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb_tag?post=2943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}