Is there a proper way to host SMP and XFTP servers behind a reverse proxy ?

Start by investigating the HAProxy TCP proxy with SNI approach described in the issue, including TLS 1.3 passthrough for SMP and XFTP and sharing port 443 with other domains. Done should be a documented supported configuration or a clear explanation of the limitation and an alternative deployment approach.

The small embedded web server for SMP is the easy piece as there is an option to use http: 8000 and so any reverse proxy can send the traffic to that.

My question is more on SMP and XFTP protocols, any of you had a chance to make it work with a HAProxy with TCP Proxy using SNI ?

My issue is that ideally it would be better to use 443 (if I only use 5223 I see this warning when launching the server: > WARNING: the clients will use port 443 by default soon.) but how can it use 443 if other domains are ?

As SMP is based on TLS1.3 is is possible to use the SSL routing based on SNI on HA Proxy ? This mode is only reading the SNI and don't touch on SSL (no offloading) and keep the TLS managed by the backends (here SMP and XFTP).

Any of you using something like this ? Or is there another alternative to host SMP/XFTP with other domains on 443 on the same IP address ? (which is a pretty common setup)

Thanks