A network node for user data traffic handling (UPF), receives (52, 112) traffic for an application, wherein the traffic is to be sent to a logical server associated with the application, wherein the logical server resides on a network server (10.4), and wherein the application has a corresponding application function (AF). On detecting (53, 113) that the received traffic includes an encrypted server name indication such that the associated logical server cannot be identified, the network node requests (55, 115) from the corresponding application function information identifying the application. In response to receiving (62, 117) information identifying said application, the network node subsequently handles the traffic (63, 118) based on the identified application.