Using caddy layer4 for TLS passthrough

I’m looking to implement this for my use-case as well, but am unsure if it’s the right tool. This is regarding How to setup SSH over HTTPS with Caddy?
I have SSH being tunneled through HTTPS to access SSH in an environment with a packet sniffing firewall blocking SSH connections via GitHub - proxytunnel/proxytunnel: Stealth tunneling through HTTP(S) proxies.

Since Caddy doesn’t support HTTP CONNECT, I have to use Apache to handle this.
However, I need this to be available on subdomain.example.com and example.com is handled by Caddy. I naively thought, that simply doing a reverse_proxy on caddy from subdomain.example.com to Apache would allow this to work, but it doesn’t, Caddy breaks the HTTP CONNECT.

I guess the layer4 plugin would allow Caddy to passthrough the encrypted Apache packages. Is this correct? Can Caddy + layer4 be setup to passthrough subdomain.example.com of example.com to Apache without messing with the signal?