Faking SNI with curl and OpenSSL: Testing HAProxy Routing Without Touching DNS
How to override the TLS SNI value with curl's --connect-to and openssl s_client's -servername, why -H Host doesn't work for this, and how to set up the self-signed certs to make it verify cleanly.