We have a scenario where I have two applications that are running in virtual machines. They will both serve traffic on ports 80/443, but on different host names. One of the containers is vendor-provided, and they will decrypt HTTPS traffic within the container.
Can I configure NGINX (or another tool) to route traffic to a certain VM based on the targetted hostname (perhaps via SNI) without decrypting the packets in the proxy?
myapp1.example.com:443 -> NGINX -> 10.0.0.1:8443 (terminate HTTPS on VM) vendor1.example.com:443 -> NGINX -> 10.0.0.1:9443 (terminate HTTPS on VM)