Tenant Browser Code Rewriting to Offload CASB Proxy Compute
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional web proxies face significant computational burdens when rewriting code in web pages, leading to performance bottlenecks as they consume substantial resources, especially with large code sizes, which can hinder the ability of cloud access security brokers (CASBs) to deliver web pages efficiently.
Innovation Solution
Distribute the code rewriting process among browser applications within the same tenant network, utilizing a proxy service to identify code components and delegate rewriting tasks to these applications, rather than relying solely on the proxy computing device, thereby offloading the computational burden.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the proxy service performs code rewriting locally, then the web page can be delivered through the CASB, but the compute resources on the proxy computing device are consumed and performance deteriorates
Solution Approach 1:
The patent introduces a worker process as an intermediary component that runs on the client computing device instead of the proxy server. This worker process receives code components from the proxy service, performs the rewriting operation locally on the client device, and returns the rewritten code to the proxy service. This mediator approach transfers the computational burden from the proxy server to the client device, resolving the resource consumption issue while maintaining CASB functionality.
Solution Approach 2:
The client computing device performs code rewriting autonomously through the worker process without requiring continuous resource allocation from the proxy server. The proxy service only handles code component extraction and coordination, while the actual rewriting is performed by the client device's own processing resources. This self-service model eliminates the dependency on proxy server compute resources for the rewriting operation.
2Reliability
If the proxy service rewrites all code components, then security monitoring is maintained, but the processing time increases and productivity decreases
Solution Approach 1:
The patent segments the code rewriting process into discrete code components that are extracted and processed independently. Instead of rewriting the entire web page code, the proxy service identifies and extracts only the necessary code components for security monitoring, sends them to the worker process, and receives back the rewritten components. This segmentation approach maintains security monitoring capability while significantly reducing the processing time and computational overhead.
3Adaptability or versatility
If the proxy computing device performs code analysis and rewriting, then the web page can be modified according to security policies, but the device complexity increases
Solution Approach 1:
The patent extracts the code rewriting functionality from the proxy server and implements it as a separate worker process on the client device. The proxy service retains only the essential functions of receiving web pages, extracting code components, and coordinating the rewriting process. This extraction reduces the complexity of the proxy computing device while maintaining the adaptability to modify code according to security policies through the distributed worker process.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A tenant network of a cloud services platform performs the rewriting of code included in a web page. For example, a proxy service communicatively coupled to a plurality of browser applications belonging to the same tenant network and a server receives a request, from a first browser, for a web page hosted by the server. The web page is returned to the proxy service, and the proxy service identifies code component(s) thereof for rewriting. The proxy service provides the identified code component(s) to a second browser included in the same tenant network as the first browser that is configured to rewrite the code component(s). After rewriting the code component, the second browser provides the rewritten code component(s) to the proxy service, which forwards the web page, along with the rewritten code component(s), to the first browser for execution and rendering.