Nginx supports BoringSSL too and it already has ESNI support apparently https://www.theregister.co.uk/2018/07/17/encrypted_server_names/ Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281512,281517#msg-281517