table <ldap_servers> { ldap01.home.foo.sh }
relay "ldap" {
    listen on 0.0.0.0 port 636
    forward to <ldap_servers> check tls
}