It's also capable of masking its proxy traffic as TLS. This works so well you could actually have a web server behind it that would still work through the same port for a regular TLS client.