there are some ios/osx clients which want to talk plain turn over 443 in certain situations.
eturnal does not currently implement handling this. coturn does. but i would rather not go back to that.
which made me wonder … can haproxy detect “oh that looks like a ssl hand shake” and then go crypto mode and if not forward the current connection directly to the turn server?