[help!] envoy forwards traffic to the tcp secondary transparent proxy through tcp_proxy, but before envoy receives the response, the tcp secondary transparent proxy sends a FIN and disconnects the connection. about envoy HOT 2 CLOSED

- filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/stats.PluginConfig
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    access_log:
                      - name: envoy.access_loggers.file
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                          log_format:
                            text_format_source:
                              inline_string: '[%START_TIME%] "%REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)%
                            %PROTOCOL%" %RESPONSE_CODE% %RESPONSE_FLAGS% %RESPONSE_CODE_DETAILS%
                            %CONNECTION_TERMINATION_DETAILS% "%UPSTREAM_TRANSPORT_FAILURE_REASON%"
                            %BYTES_RECEIVED% %BYTES_SENT% %DURATION% %RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%
                            "%REQ(X-FORWARDED-FOR)%" "%REQ(USER-AGENT)%" "%REQ(X-REQUEST-ID)%"
                            "%REQ(:AUTHORITY)%" "%UPSTREAM_HOST%" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS%
                            %DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %REQUESTED_SERVER_NAME%
                            %ROUTE_NAME% %FILTER_CHAIN_NAME%

                            '
                          path: /dev/stdout
                    cluster: ProxyCluster
                    stat_prefix: ProxyCluster
              name: proxy_outbound_0.0.0.0_443
          listener_filters_timeout: 0s
          name: 0.0.0.0_443
          traffic_direction: OUTBOUND