I've published an article on how we used TPROXY iptables module to build Cloudflare Spectrum product:

• https://blog.cloudflare.com/how-we-built-spectrum/