Are you sure? SSH uses TCP, and encapsulates the web traffic which also uses TCP... in what way is that not TCP over TCP?
"TCP-over-TCP" and "TCP carried on something that happen to be TCP" turn out to be two very different things.