Verify node-level routing matchers via a two-proxy relay: a forward proxy whose only chain node carries matcher Host(`tcp-echo`) is only eligible for a matching Host, so the request is relayed upstream to the echo server; a non-matching Host is excluded (no eligible node) and never reaches the echo server. Mirrors the resolver/ingress e2e pattern.