From 76725fcc28873797b7378056b5ecf5a033352a73 Mon Sep 17 00:00:00 2001
From: Piotr Sikora <piotrsikora@google.com>
Date: Thu, 24 Aug 2017 08:03:20 -0700
Subject: [PATCH] tls: add require_sni. (#164)

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
---
 api/tls_context.proto | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/api/tls_context.proto b/api/tls_context.proto
index 57da8e9e..2d7dd8c8 100644
--- a/api/tls_context.proto
+++ b/api/tls_context.proto
@@ -110,4 +110,7 @@ message DownstreamTlsContext {
   // If specified, Envoy will reject connections without a valid client
   // certificate.
   google.protobuf.BoolValue require_client_certificate = 3;
+
+  // If specified, Envoy will reject connections without a valid and matching SNI.
+  google.protobuf.BoolValue require_sni = 4;
 }