Traefik with tcp routing is pretty simple, adding a few lines of configuration for traefik and no code changes if you use upcoming release of Netmaker. I would be happy to know the use case of mqtt over websocket. I’m thinking if advanced firewall may block mqtts on port 443 but not block mqtt over websockets on port 443, if that’s the case mqtt over secure websockets becomes interesting solution. Paho-mqtt-golang, that netmaker uses, supports mqtt over websocket if remembered correctly.