Enable SNI Proxying in Nginx

nginx.conf

# http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_server_name
# The Server Name is a TLS extention (not SSL) during the CLIENT HELLO in the init client TLS handshake for SNI.
# If this frame "server_name" is missing in the CLIENT HELLO packet, the server should fail TLS
# This happens with AWS Cloudfront

location /path/here/ {
  proxy_redirect        off;
  proxy_ssl_server_name on;
  proxy_pass            https://proxy-site.com/path/here/;
}