tcp:
  routers:
    tls-passthrough:
      entryPoints:
        - tls
      rule: "HostSNI(`*`)"
      service: ssl-backends
      tls:
        passthrough: true

  services:
    ssl-backends:
      loadBalancer:
        servers:
          - address: "192.0.2.10:443"
          - address: "192.0.2.11:443"