Dose Stream Proxy support to proxy TCP with TLS to upstream, TLS handshake on upstream side?

[pg-yang]

Hello, community.
From Stream Proxy, I noticed stream proxy can accept TSL connection, and route a request through SNI as well, but must configure certificate on apisix side, that means TLS handshake also is processed on apisix side, right?
Actually, I want to use apisix as stream proxy, and proxy TCP with TLS to upstream through SNI router rules, but does TLS handshake on upstream side. Dose apisix support the scenarios? Could you offer some doc or suggestions? Thanks

[pg-yang]

OK, By debugging source code. APISIX parse SNI through ngx_ssl.server_name(). openresty ssl mentioned that the API is for controlling NGINX downstream SSL handshakes, Which means openresty must do TLS handshake itself.
Another way to parse SNI is by ngx.req.socket in preread_by_lua_block, but as mentioned in the doc, the consumed data couldn't be re-consumer.
Finally, envoy sni_dynamic_forward_proxy_filter could achieve my requirements.
Thanks