21 results about "Web proxy" patented technology

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

A system comprises a user communication device, a content management server, and a friction free download (FFD) proxy server. The user communication device is configured to send identification information of the user communication device; receive web content in a first web application; send an FFD installation request to the FFD proxy server; download the second web application; and install the second web application during an active session of the first web application. The content management server is configured to send the web content. The FFD proxy server is configured to register the content management server and the user communication device; receive the FFD installation request; authenticate the user communication device during the application session of the first web application; send the second proxy routing information; and send notification information indicating a status of the FFD installation of the second web application.

The invention discloses an intelligent network proxy access system, which comprises a proxy resource layer used for constructing various types of proxy IP pools, storing IP resources in the corresponding proxy IP pools in a classified manner, and performing quality rating processing on the IP resources at the same time; the intelligent scheduling layer is used for synchronizing tasks with an intelligent marketing multi-dimensional model operation platform and a global data acquisition and analysis system in real time and realizing task linkage scheduling; the compliance control layer is used for simulating and avoiding platform rule risks according to the multi-platform agent compliance library in combination with human behaviors; the adaptive docking layer is used for providing a multi-type standardized interface to be docked with the intelligent marketing multi-dimensional model operation platform and the global data acquisition and analysis system; and the monitoring operation and maintenance layer is used for providing a multi-dimensional monitoring board and intelligent alarm and supporting full-link operation and maintenance management. The method has the advantages of high adaptability, high stability, high concurrent support, high compliance, service value increment and the like.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.

The invention discloses a network access method and system based on a set top box, and the method comprises the steps: a device side generates a target website access instruction, and transmits the target website access instruction to a server side browser through a preset control link; the server browser analyzes the target website access instruction to obtain a target website connection instruction, and sends the target website connection instruction to the device end through a preset network proxy link; the device side establishes connection with a target website according to the target website connection instruction, obtains target website data, and sends the target website data to a server side browser through a preset network proxy link; the server browser extracts target demand data in the target website data according to the target website connection instruction, and sends the target demand data to the device end through a preset control link; and the device side visually displays the target demand data. According to the invention, by constructing the control link and the network agent link, the response speed of the set top box when entering a large website can be effectively improved.

Some aspects of the present technology relate to technologies for performing client testing using network footprint comparison. In accordance with some configurations, a network proxy initiates a client-side network testing process associated with a network and an application where the network proxy intercepts outbound network requests from the application via the network. A network signature of the application is then generated using the outbound network requests and this network signature is compared to a baseline network signature. In accordance with some configurations, comparing the network signature comprises identifying variances in application-requested-inputs associated with the one or more outbound network requests. Based on this comparison, a client-side network test result is generated that can be used to identify variances in the application relative to the baseline network signature.

Approaches to providing endpoint client authentication and application access control in a zero-trust network access (ZTNA) environment are described. A secure session is generated with a secure web proxy based on a request from a browser, wherein the request corresponds to a user and requests access to a server. A secure tunnel is established between the secure web proxy and the browser. A web proxy address corresponding to the user is generated. The user is identified based on a handshake procedure with the secure web proxy. A temporary passcode is generated for the user to be used for access to the server. The temporary passcode is sent to an email address associated with the user. The server is caused to authenticate the user utilizing the temporary passcode to allow the user access to the server if the temporary passcode is approved.

The invention discloses a cross-virtual routing forwarding proxy control method and device and a storage medium, and relates to the technical field of network virtualization and proxy services, and the method comprises the steps: expanding proxy binding instruction grammar of network proxy software according to a preset virtual routing forwarding name parameter, and obtaining a target proxy binding instruction; according to the target agent binding instruction, a structural body of the network agent software is expanded, and an expanded structural body is generated; after a virtual route forwarding name corresponding to the target agent binding instruction is extracted, the virtual route forwarding name is stored in an extended local upstream configuration structural body, and a target local upstream configuration structural body is obtained; and after establishing a function creation socket, binding the socket with a target virtual routing forwarding name instance in the target local upstream configuration structural body to realize a cross-virtual routing forwarding proxy. Through the cross-virtual routing forwarding agent, the problem of poor efficiency of the cross-virtual routing agent is solved, and the implementation process of the cross-virtual routing forwarding agent is optimized.

A kind of MAC identification and protocol detection-based Internet of Things equipment unified management method and system, it is related to the field of digital information transmission, in the method, the IP and MAC address of equipment are collected, the supported management protocol and port are detected, and based on MAC address, vendor information is parsed, data is structured into database to generate equipment list;Virtual display service is deployed in server to configure remote desktop instance, graphical browser is called to access equipment management page in the environment without physical display card, and access port is converted through Web proxy;In response to the login instruction of user, remote connection is established through Web port to show management page, and the account and password of matching are automatically extracted and filled, to complete the automatic login of equipment.The present application is used to improve the coherence and overall operation efficiency of unified scheduling of multi-vendor equipment.

The application relates to the technical field of APP detection data processing, and discloses a harmful APP effective core domain name deep detection method, which comprises the following steps: firstly, a sandbox environment is constructed, a network proxy service is constructed in the sandbox environment, and communication traffic information of an APP is comprehensively acquired; then, the APP accesses the Internet through a TUN mode connection gateway in the sandbox test environment; internal operations of the APP are automatically operated, including login, registration and refreshing operations; running analysis is carried out by limiting network bandwidth, delay and packet loss rate parameters; core domain name analysis is carried out, specifically including deep detection of traffic logs; a training model is established according to the traffic logs, the traffic logs are analyzed through the model, a machine learning decision tree algorithm or a data analysis method is used for model analysis, and effective situation data of the APP is confirmed and analyzed. The application constructs an APP communication log analysis model based on a decision tree algorithm, and identifies suspected core domain names based on dimensions such as communication behavior and communication content.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.

The application discloses a method for realizing TCP secure long connection on a browser, comprising the following steps: building a WebSocket network proxy connection server and providing a WebSocket connection monitoring service, performing security check when receiving a WebSocket connection request, starting to connect the WebSocket to a target service through TCP and forwarding transmission data, tracking the state of each connection and cleaning up when the connection is closed, which has the beneficial effects that a scheme for realizing TCP secure connection on the browser is provided, the demand for directly connecting the server through TCP on the webpage is realized, and compared with the current project status, the secure TCP connection service can be realized without installing the client by the user; the method provided by the application is completely based on the underlying network protocol transmission, can realize the maximum compatibility, the minimum change and the most convenient maintenance.

Examples of systems and methods for network proxy server for energy efficient video streaming on mobile devices are generally described herein. A proxy server to deliver video content may include a communication module to intercept a request for video content from a mobile device, the request for video content intended for a content server and forward a modified request for the video content to the content server. The communication module may receive the video content from the content server and transfer a portion of the video content to the mobile device using a multipath transport protocol.

The embodiment of the specification discloses a kind of construction methods, device and equipment of browser front-end tool chain, it is related to artificial intelligence technical field, for solving the problem of existing construction poor performance.For the construction system executed in browser environment, comprising: based on the front-end editing module running in browser main thread, receiving the construction instruction of user;Through front-end editing module, the construction task corresponding to the construction instruction is sent to background building module, to execute the construction task by background building module, generates construction product;Through background building module and front-end editing module, construction product is written into browser local storage space;Through network proxy module, the resource request initiated by preview framework is intercepted, to obtain corresponding construction product from the browser cache space in browser local storage space, and send to preview framework for rendering.

The present application provides a cross-cluster application access method, a gateway apparatus, and a related product, capable of realizing communication between cross-cluster applications and reducing the resource occupation of a network proxy component in a cluster. The method is applied to a multi-cluster system, the multi-cluster system comprises an application layer gateway, a first K8s cluster and a second K8s cluster, the first K8s cluster comprises a network proxy component and a first application, and the second K8s cluster comprises a second application. Specifically, the network proxy component intercepts an access request sent by the first application, and forwards the access request on the basis of a routing rule matching the request. When the routing rule instructs to perform application layer processing on the access request, the access request is sent to the application layer gateway, so that the application layer gateway performs application layer processing on the access request, and forwards the processed access request to the second application. When the routing rule instructs to perform transport layer processing on the access request, the access request is sent to the second application.

This application relates to the field of signal transmission technology and provides an API interface vulnerability analysis method and apparatus, terminal device, and storage medium. The API interface vulnerability analysis method includes: firstly, obtaining at least one application installation package; determining the application corresponding to each application installation package; performing static analysis on the application to obtain multiple running components corresponding to the application; driving a webpage to connect to and launch the application; for each application, setting up a web proxy and installing a digital root certificate on the webpage; obtaining log files generated by the multiple running components of each application through the webpage; and determining the vulnerability information of the API interface corresponding to the application based on the log files. Through the above solution, this application solves the technical problem that existing API interface vulnerability mining methods can cause risks to APP operation.

A method for scheming a model for detecting SSH communication according to an embodiment includes collecting a training dataset including a plurality of network session logs from a web proxy, generating a plurality of preprocessed log information based on a plurality of original datasets included in each of the plurality of network session logs, training, in a first algorithm-based first initial model and a second algorithm-based second initial model for detecting a log corresponding to SSH communication from network session logs, the first initial model and the second initial model based on the plurality of preprocessed log information, and using a new dataset as input to the trained first initial model and the trained second initial model and scheming a final model based on a detection result of the trained first initial model and a detection result of the trained second initial model.

Approaches to providing endpoint client authentication and application access control in a zero-trust network access (ZTNA) environment are described. A secure session is generated with a secure web proxy based on a request from a browser, wherein the request corresponds to a user and requests access to a server. A secure tunnel is established between the secure web proxy and the browser. A web proxy address corresponding to the user is generated. The user is identified based on a handshake procedure with the secure web proxy. A temporary passcode is generated for the user to be used for access to the server. The temporary passcode is sent to an email address associated with the user. The server is caused to authenticate the user utilizing the temporary passcode to allow the user access to the server if the temporary passcode is approved.

The invention provides a cross-cluster application access method, a gateway device and a related product, which can realize communication between cross-cluster applications and reduce resource occupation of a network agent component in a cluster. The method is applied to the multi-cluster system, the multi-cluster system comprises an application layer gateway, a first K8s cluster and a second K8s cluster, the first K8s cluster comprises a network agent component and a first application, and the second K8s cluster comprises a second application. Specifically, the network agent component intercepts an access request sent by a first application, and forwards the access request according to a routing rule matched with the request. Wherein when the routing rule indicates to execute the application layer processing on the access request, the access request is sent to the application layer gateway, so that the application layer gateway executes the application layer processing on the access request, and the processed access request is forwarded to the second application. And when the routing rule indicates that the transport layer processing is performed on the access request, sending the access request to the second application.

This application relates to a network configuration method, apparatus, storage medium, and electronic device for an application. The method includes: determining a target proxy device through the application's network proxy configuration page, wherein the application's network proxy configuration page is independent of the system network proxy configuration page of the system hosting the application; searching for target network proxy configuration information for the target proxy device from multiple network proxy configuration information sets, wherein the network proxy configuration information includes at least the network address and port number of the proxy device; and invoking the network API of the system hosting the application based on the target network proxy configuration information, so that the application can transmit data with a data server through the target proxy device. This application solves the technical problems of inconvenience and low efficiency in switching network environments during application development.