one is before handshake with real server, it's making sense, but why it is called again after proxy handshake with client