We have the following problem for HTTPS decrypting proxy - https://www.diladele.com/websafety/docs/faq/squid/https_decryption/websockets/
It might be possible to switch to opaque tunnel after getting the 'HTTP 101 Switching Protocols' from the origin server in response to web socket Upgrade request.