Multi-tenancy based on TLS SNI / hostname

[sandeepkunusoth]

I am exploring a multi-tenant setup where a single Valkey instance/cluster is shared by multiple tenants, with each tenant mapped to a separate logical database.

For example:

tenant-a.cache.example.com → DB 0
tenant-b.cache.example.com → DB 1
tenant-c.cache.example.com → DB 2

The goal is for the client to connect using TLS SNI/hostname, and for Valkey to automatically determine the tenant and select the corresponding database, without requiring the client to explicitly issue SELECT . making it simple for clients.

Is there currently a way to achieve this in Valkey?

1. Can Valkey access the TLS SNI / hostname associated with the client connection?
2. Could a Valkey module inspect the SNI/hostname during connection establishment and automatically select a database based on it?
3. Are there existing module APIs, hooks, or connection-level callbacks that could support this?
4. If modules cannot do this, are there other recommended approaches—for example, a proxy/gateway in front of Valkey that terminates TLS, maps SNI → database, and forwards the connection?
5. Is there any existing work or discussion around SNI-based multi-tenancy in Valkey?