I tested mqtt over websocket (443 —> 9001) using eclipse/mosquitto (broker) behind traefik. I used mosquitto_sub (sub) and HiveMQ websocket client (pub) to this test. And mosquitto_sub received message from hivemq client successfully.
So, if netclient has mqtt websocket client functionality, users may reduce exposed port to the public.