I'm not sure how SSH comes into this equation but there's no plans for TPKT as far as I know.
I tried HA Proxy out and found it relatively easy to configure a single port behind a TLS-passthrough proxy like HA Proxy. You can find my whole little project over on my github here:
I put a new video on our YouTube channel too walking through this exact setup (minus the wildcard DNS setup which I didn't think was too relevant)
