Summary
Request to add the -m end option for domain-name matches (i.e., string that appears at the end)

Need similar to this :

req_ssl_sni -i tenant.domain.com #match the subdomain of the tenant
req_ssl_sni -m end .tenant.domain.com #matches the wildcards of the subdomain of the tenant

The functionality of the first command is already exists in https://github.com/vyos/vyos-1x/blob/current/data/templates/load-balancing/haproxy.cfg.j2#L129

Need an equivalent to the second command for end domain matching

Use case

acl tenant_sni req_ssl_sni -m end .tenant.domain.com
Creates an ACL named tenant_sni that matches HTTPS connections with SNI ending in .tenant.domain.com.