You can't. When you connect to your reverse proxy, it needs to know to which service to forward. Either by Host()/HostSNI() or PathPrefix(). When using http, host and path are provided. When using plain TCP, the host is only provided when using TLS.
For other TCP content, you can not do any matching. Only a non-TLS catchall on the whole entrypoint traffic with HostSNI(`*`). Doc.