For context on this. We tried earlier to place substrate bootnodes behind a haproxy (reverse-proxy with ssl-termination) but at that point in time, substrate based nodes didn’t support this for a few reasons yet.
Perhaps this has been remedied in later version of substrate nodes? @Maharacha has more information from Dwellir team on this topic…