Hi @mayailurus 
,
It’s not the “hairpinning” aspect that the proxy doesn’t like, but rather the fact that some older versions of psql do not send SNI to the TLS server, which is required by the proxy. AFAIK SNI support should be enabled by default for psql clients version 14 and later, but if not, you may try this configuration option on the client side.