qjammer, 9 months ago

I am running a similar setup to yours. The issue is that only one server block can listen to an address+port pair. You ought to do something like this:

<span style="color:#323232;">map $ssl_preread_server_name $proxy_backend_router {
</span><span style="color:#323232;">        serviceA.example.com    upstreamA:12346;
</span><span style="color:#323232;">        serviceB.example.com    upstreamB:12346;
</span><span style="color:#323232;">        default $ssl_preread_server_name.invalid_proxy:443;
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;">
</span><span style="color:#323232;">server {
</span><span style="color:#323232;">        listen 443;
</span><span style="color:#323232;">        ssl_preread on;
</span><span style="color:#323232;">        proxy_pass $proxy_backend_router;
</span><span style="color:#323232;">}
</span>