[0]: https://www.wikidata.org/wiki/Q1602447
[1]: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=679937b...
[2]: https://github.com/Homebrew/homebrew-core/pull/273280
[3]: https://src.fedoraproject.org/rpms/varnish/c/59f403810b746e0...
[4]: https://repology.org/project/varnish/packages
[5]: https://github.com/endoflife-date/endoflife.date/pull/9792
I think TLS is table-stakes now, and has been for the last 10 years, at least.
TLS in -> hitch or caddy Cache -> varnish/vinyl TLS out -> haproxy
Connect them up with Unix sockets, if you like.