How do I preserve source IP with TLS PASSTHROUGH?

I have a pod that NEEDS to keep the client cert in tact. For that reason, I’ve got to use TLS passthrough.

However, I also need the source IP of the original packet origin. I can’t seem to get TPROXY working on the system due to unknown system requirements

TPROXY mode broken on 1.13.1 · Issue #37701 · istio/istio (

How can I preserve the source IP header in the packet? Do I need proxy protocol?