Secure websockets (wss://...) works fine for my company's service that runs behind haproxy (version 1.6).