Enabling TLS passthrough will activate TLS in Traefik. If it doesn’t have a TLS cert, it will create a custom one AFAIK.
You want plain TCP passthrough, without touching the TLS content inside, that’s the default behavior of a TCP router with HostSNI(`*`). No need for additional configuration.