stream {
    resolver 8.8.8.8 1.1.1.1;
    server {
        listen 443;
        ssl_preread on;
        proxy_connect_timeout 10s;
        proxy_timeout 1h;
        proxy_pass $ssl_preread_server_name:443;
    }
}