Yes, that's likely to work on many firewalls, but: - it means you can't also serve HTTP on those ports (so you'd need a dedicated IP address for SSH), and - a

Yes, that's likely to work on many firewalls, but: - it means you can't also serve HTTP on those ports (so you'd need a dedicated IP address for SSH), and - as @charcircuit wrote, it won't resist deep packet inspection. (But if DPI is a problem and you have a spare IP address, you could just use SSH over TLS without needing the HTTP CONNECT stuff and Apache.)