The scheme is like below:
ADC with external IP address and Source-NAT to the internal IP address → 2 Envoy proxies in Service Group that are balanced with the help of ADC by TCP type.
The only way that can help us is to remove the Source-NAT from this chain but how can we route traffic from external IP address to our internal IP addresses ?