diff --git a/.changelog/12672.txt b/.changelog/12672.txt
new file mode 100644
index 000000000..449890850
--- /dev/null
+++ b/.changelog/12672.txt
@@ -0,0 +1,3 @@
+```release-note:security
+connect: Properly set SNI when configured for services behind a terminating gateway.
+```