Thank you Jonathan.

Your explanations were very helpful and the link to "NameBasedSSLVHosts" also.

I will now evaluate the two scenarios. Teminate SSL in NGINX and forward http to the backend servers or use HAProxy.

Did I understood correctly that when I use HAProxy I do not have to terminate SSL at HAProxy server? SSL will then be terminated at the backend servers?

zuger