diff --git a/common/tls/client.go b/common/tls/client.go
index 00020ee2c..35c628c11 100644
--- a/common/tls/client.go
+++ b/common/tls/client.go
@@ -30,7 +30,7 @@ func parseTLSSpoofOptions(serverName string, options option.OutboundTLSOptions)
 	if !tlsspoof.PlatformSupported {
 		return "", 0, E.New("`spoof` is not supported on this platform")
 	}
-	if options.DisableSNI || serverName == "" {
+	if options.DisableSNI || serverName == "" || M.ParseAddr(serverName).IsValid() {
 		return "", 0, E.New("`spoof` requires TLS ClientHello with SNI")
 	}
 	method, err := tlsspoof.ParseMethod(options.SpoofMethod)