I have done ssh-over-websocket before (so that is TLS + SSH). I did it do get around a restrictive work proxy. Don't tell IT. I even patched socat to support we

I have done ssh-over-websocket before (so that is TLS + SSH). I did it do get around a restrictive work proxy. Don't tell IT. I even patched socat to support websocket so it was easy to use with ssh's ProxyCommand. I plan to use this scheme instead of having a bastion server to access containers.