You already have a TCP connection, so NAT and firewalls don't matter here. Proxies have to be web socket aware anyway.