I currently run my home network using pfSense alongside multiple MikroTik APs, which are all great devices. I would much prefer an exclusively MikroTik ecosystem with a unified Wi-Fi management interface using CAPsMAN.
One key feature RouterOS has been missing so far was a basic alternative to HAProxy. RouterOS 7.22 introduced a reverse proxy with SNI-based application routing, which is exactly what I'm looking for. However, it appears that it only functions as a decrypting proxy.
Is it possible to configure the reverse proxy to forward traffic based solely on SNI, without decrypting it or requiring all server certificates to be installed on the edge device? If not, would this be possible to add in a future release?
ROS can run various services in apps/containers on many container capable devices which can extend router features, you can try to run HAProxy in container if you have container capable device.
Sent to support feature request and good luck. Reverse proxy is just one of latest partially implemented ROS features (DNS server is missing many things, Socksify missing UDP support, etc…)
Not to say that it is not a valid additional feature, but it is way different than a terminating proxy. Plus there is ESNI, which obviously cannot be handled without a full DH exchange...