Petr

The network tab check is the fastest first move and it needs no server access at all.

Worth knowing that a tunnel handles this without configuration, since it carries the connection rather than proxying it hop by hop. Not an argument to move if your proxy works, but if you are fighting upgrade headers on three separate apps it is a legitimate way out.