frontend fe_ssh bind *:2222 ssl crt /etc/haproxy/certs/ssl.pem mode tcp log-format "%ci:%cp [%t] %ft %b/%s %Tw/%Tc/%Tt %B %ts %ac/%fc/%bc/%sc/%rc %sq/%bq dst:%[var(sess.dst)] " tcp-request content set-var(sess.dst) ssl_fc_sni use_backend %[ssl_fc_sni]