tobaru

Routes TLS connections by SNI/ALPN without decryption, preserving end-to-end encryption and minimizing latency, as detailed in the passthrough mode benefits with no private keys needed on the proxy.

Supports multiple routing strategies including IP-based, TLS SNI with wildcards, HTTP path-based routing, and header manipulation, enabling precise management of traffic flow through YAML/JSON configuration.

Features hot reloading that automatically detects and applies configuration changes without restarting the service, improving operational efficiency as highlighted in the README.

Automatically configures iptables rules for IP allowlists, enhancing security by enforcing access controls at the firewall level, though it requires root or specific capabilities on Linux.