or just use commercial NGFW which uses combination of ASIC and specialized compute cores to decrypt and inspect traffic inline and block threats. They are very capable, but very expensive