← Back
Home › Systems › Networking and edge

sse-gateway

security service edge

Zscaler, Netskope, Cloudflare One

SystemTechniques · 25Primitives · 81 sse-gateway Deterministic simulation testingdistributed · medium: Run the whole system in one thread under a seeded scheduler with simulated network, disk and clock, so every failure replays from its seed.›Primary-backup replicationdistributed · medium: One node orders all writes and ships them to standbys; the acknowledgement rule (none, one, all) sets what a crash loses, and an external arbiter decides who takes over.›Text classificationmachine-learning · medium: Assign one or more labels to a text; climb a ladder from regexes to linear models on n-grams, embeddings, fine-tuned encoders and LLM prompts, only as far as the data and budget demand.›Reverse proxynetworking · medium: A server-side intermediary that terminates client connections and forwards each request to one of a pool of upstream servers, with routing, health checks, timeouts and safe retries.›Linear-time regular expression matc…search-sort · medium: Match a regular expression in O(pattern x text) worst case by tracking all live parse positions at once, then cache the state sets as a lazily built DFA for speed.›Coverage-guided fuzzingsecurity · medium: Mutate inputs, run an instrumented target, and keep any input that reaches a new code edge; feedback turns blind guessing into incremental search.›Device posture checkssecurity · medium: Collecting and verifying device health (OS version, disk encryption, EDR running, managed cert) before granting accessHTTP/1.1 message parsingnetworking · low: Parse HTTP/1.1 requests and responses incrementally from a byte stream: RFC 9112 body-length rules, chunked decoding and the strictness that stops request smuggling.›HTTP/2networking · low: Binary multiplexed framing for HTTP over one TCP connection: streams, per-stream and per-connection credit windows, HPACK header compression and the limits that contain abuse.›Aho-Corasick multi-pattern matchingsearch-sort · low: Find all occurrences of many fixed patterns in one pass over the text, in time independent of the pattern count, using a trie with failure links.›X509 certificatessecurity · low: Certificate chains, path validation, SANs, revocation and short-lived issuanceHttp connect tunnelingnetworking · low: HTTP CONNECT tunnels for proxying TLS and arbitrary TCPTransparent interceptionnetworking · low: Redirect traffic to a local proxy (iptables TPROXY/REDIRECT, eBPF) without app changesHdr histogramdata-structures · low: Log-linear bucketed histograms with bounded relative error for latency percentilesLuhn checkdata-structures · low: Luhn mod-10 check digit validation for card numbers and IDsProcess supervisionhardware-os · low: A parent process starts services, reaps their exits and restarts them under a delay and burst-limit policy, then stops them with SIGTERM before SIGKILL.›Anycastnetworking · low: Announce one IP prefix from many sites over BGP; routing sends each client to its preferred site, and a failed site leaves by withdrawing the route.›Dns blocklistsnetworking · low: DNSBL/URIBL reputation lookups via reversed-IP DNS queriesPublic Suffix Listnetworking · low: Find the registrable domain (eTLD+1) of a host name by matching the longest rule in a community-maintained list of shared suffixes.›URL normalizationsearch-sort · low: Rewrite a URL to one canonical key, in safe RFC 3986 steps plus lossy, site-dependent ones (tracking parameters, query order, fragments), and keep the original beside the key.›Ipsec espsecurity · low: IPsec ESP tunnels with IKEv2 key exchange and anti-replayMutual TLSsecurity · low: TLS where the client also proves a certificate key, so every connection carries a verified, rotatable machine identity.›OAuth 2 and OpenID Connectsecurity · low: Delegated authorization (OAuth 2) and login on top of it (OIDC); use authorization code + PKCE for every user-facing client.›+ 18 more techniques+ 65 more primitives

Similar systems

Share the most building blocks with this one.

zero-trust 36 %forward-proxy 35 %enterprise-vpn 34 %llm-dlp 33 %agent-credentials 29 %