nginx as a transparent SSL proxy using stream module (quick test)

iptables.sh

iptables -t nat -A OUTPUT -p tcp -m tcp --dport 443 -m owner --uid-owner root -j RETURN
iptables -t nat -A OUTPUT -p tcp -m tcp --dport 443 -m owner --uid-owner nginx -j RETURN
iptables -t nat -A OUTPUT -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3130

nginx.conf

daemon off;

events {}

error_log /dev/stdout info;

http {
  access_log /dev/stdout;
}

stream {
    server {
        listen 3130;
        ssl_preread on;
        proxy_pass $ssl_preread_server_name:443;
    }
}