Web Endpoint Device Automatic Proxy Mode Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing endpoint device communication methods using proxy servers face issues such as incorrect content localization, third-party security system interference, geographical firewall blockages, and compatibility problems with certain websites and web applications, leading to suboptimal performance and security concerns.
Innovation Solution
Implementing a system that automatically switches between proxied and non-proxied communication modes based on communication performance conditions, allowing the endpoint device to directly connect with the target server without an intermediate proxy server, and enforcing security policies through cloud-based security services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an intermediate proxy server is used for web transactions, then security protection is improved, but communication performance deteriorates due to additional routing steps and potential latency
Solution Approach 1:
The system dynamically switches between proxied and non-proxied communication modes based on real-time communication performance conditions. When performance thresholds are met, it transitions from using a proxy server to direct communication, and vice versa. This dynamic adaptation resolves the contradiction by allowing the system to optimize between security and speed based on actual network conditions.
Solution Approach 2:
The system changes the communication parameter (proxy mode vs. direct mode) based on monitored performance conditions such as latency, throughput, and network availability. By adjusting this binary parameter dynamically, the system can achieve both security protection when needed and optimal performance when direct communication is feasible.
2Object-affected harmful factors
If a proxy server is used to block suspicious sites, then security against malware is improved, but compatibility with certain websites and web applications deteriorates
Solution Approach 1:
The system dynamically adapts its communication mode based on the target website's characteristics and performance conditions. When direct communication is attempted and fails due to compatibility issues, it falls back to proxied communication, and vice versa. This dynamic switching maintains both security protection and website compatibility.
Solution Approach 2:
The system monitors communication performance and compatibility feedback from web transactions. Based on this feedback, it adjusts whether to use proxy or direct mode, ensuring that security measures do not inadvertently block legitimate websites while maintaining protection against malware.
3Object-affected harmful factors
If proxy server is used for content filtering, then security against third-party interference is improved, but communication latency increases
Solution Approach 1:
The system dynamically switches between proxied and direct communication modes based on real-time latency measurements and network conditions. When latency thresholds are exceeded, it transitions to direct mode to reduce delay, and switches back to proxied mode when security protection is more critical, thus optimizing the trade-off between security and speed.
Data Source
AI summary
A method, system, and computer-usable medium are disclosed, comprising: initiating a web transaction between an endpoint device and a target web server; automatically switching between a first communication mode and a second communication mode in response to one or more communication performance conditions associated with conducting the web transaction, where the endpoint device communicates with the target web server using an intermediate proxy server in the first communication mode; and the endpoint device communicates with the target web server without using the intermediate proxy server in the second communication mode. Other embodiments include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices, each configured to perform the actions of the methods.