Router as LDAP-Reverse-Proxy

We use Routers as double-NAT-Gateways to enable services between networks without routing. For this we have 2 interfaces with srcnat and some rules for the services with dstnat. This works perfekt.
Now whe have some LDAP services which are not supporting TLS. On the other side we have clients which must work with TLS in the 2nd net.
Is it possible to use the router to change the coding between the networks? TLS-LDAP-Request comes at network 1 and will be decoded at the router and leaves the router uncrypted at network 2. And the answer takes this way back of corse.

Niels