let's say a client can communicate with services A, B or C which are sitting behind a proxy (l4).
The client sends a stream of data over TCP to the proxy which in turn is responsible for forwarding the call to the required service as a TCP stream.
Because of some error at the required service, let's say at A, the proxy forwards this request to the error handler and mentions in the header the service name A. Now the error handler establishes the TLS by presenting the certificates of A and sending back the HTTPS response
After some time, an error occurred at service B, thus proxy decides to again send the TCP buffer to the error handler and then B would establish the TLS with the client with the help of the certificates of B.
I'm having trouble regarding how to establish a TLS between a client and the error handler service every time depending on the service name.
Reason of not doing this TLS at the proxy in because our design is to only route the incoming TCP buffer. We also have to run complex sophisticated work on this error handler service. Hence, we don't want to do the same on proxy.