We do have a solution like this for chinese customers, using stunnel and tinyproxy. However, it adds quite a bit of complexity to the customer side config which

We do have a solution like this for chinese customers, using stunnel and tinyproxy. However, it adds quite a bit of complexity to the customer side config which I would like to circumvent if possible. Also, this is in an industrial setting, so a random machine in a factory would also not be allowed to use port 443 normally.