similar to https://github.com/rekby/lets-proxy2/issues/63, but for TCP connections. For prevent DOS by TLS handshakes.