f09a7a69b3
When TLS ClientHello has no SNI extension (ServerName is empty), normalizeHost returns empty string. Both sniffer_tls.go paths (sniffing and forwarder packages) previously still called dial with an empty host, cascading 'missing port in address' errors through connector, router, and service layers. Now returns early with a debug-level log, silently closing the connection instead of attempting to dial upstream.