Similar to tcp_nsjail, but with a HAProxy TLS termination proxy. Recommended over ssh
