TCP proxy that inspects the TLS handshake for server name extension then proxies the request