https://blog.mmf.moe/post/nginx-dnsmasq-sni-proxy/