global
  log localhost local1 notice
  maxconn 2000
  daemon

defaults
  log global
  mode tcp
  retries 3
  option tcpka
  option tcp-check
  timeout client 30s
  timeout server 30s
  timeout connect 5s

frontend ft_ssl
  bind *:9600
  tcp-request inspect-delay 5s
  tcp-request content accept if { req_ssl_hello_type 1 }
  default_backend bk_ssl

backend bk_ssl
  use-server server1 if { req_ssl_sni -i application1.example.com }
  server server1 elasticsearch-default-1:9300 weight 0 check
  use-server server2 if { req_ssl_sni -i application2.example.com }
  server server2 elasticsearch-default-2:9300 weight 0 check
  server default elasticsearch-default-2:9300 check