Blocking TCP and TLS transports for the ClickHouse native protocol: socket configuration, connect and read deadlines, always-on hostname verification, mutual TLS, and the transport SPI behind which future transports sit.