global
    log /dev/log local0
    maxconn 10000
    daemon

defaults
    log global
    mode tcp
    option tcplog
    timeout connect 5s
    timeout client  60s
    timeout server  60s

frontend https_in
    bind 0.0.0.0:443
    mode tcp

    # Inspect TLS ClientHello
    tcp-request inspect-delay 5s
    tcp-request content accept if { req_ssl_hello_type 1 }

    # Routing by SNI
    use_backend reality_backend if { req.ssl_sni -i www.wikipedia.org }
    default_backend caddy_backend

backend caddy_backend
    mode tcp
    server caddy caddy:443

backend reality_backend
    mode tcp
    server xray 10.0.64.6:443