Per-application split-tunneled proxy

1. A system for transparently proxying connections based on hostnames, comprising:

a computing device comprising a processor and a memory;

a network driver configured to provide network access to applications installed on the computing device; and

a tunnel client stored in the memory that, when executed by the processor, causes the processor to at least:

receive from the network driver a request to make a connection to a remote host specified by an internet protocol (IP) address in the request;

query a hostname lookup table to determine a hostname associated with the IP address for the remote host;

identify a policy based on the hostname associated with the IP address for the remote host; and

route the connection based on the policy.

2. The system of claim 1 , wherein the network driver is further configured to cause the computing device to at least:

obtain the request to make the connection from an application executing on the computing device;

determine that the application executing on the computing device is identified in a list of managed applications; and

forward the request to make the connection to the tunnel client based on a determination that the application is identified in the list of managed applications.

3. The system of claim 1 , wherein the tunnel client further causes the computing device to utilize the tunnel client as a domain name service (DNS) server for resolving DNS queries of applications executing on the computing device.

4. The system of claim 1 , wherein the tunnel client, when executed to route the connection based on the policy, further causes the processor to send a response to the request from the network driver, the response comprising a command to the network driver for how to establish the connection with a remote host.

5. The system of claim 1 , wherein the policy specifies that the connection is to be routed through bypassed connection.

6. The system of claim 1 , wherein the policy specifies that the connection is to be blocked.

7. The system of claim 1 , wherein the policy specifies that the connection is to be routed through a tunneled connection maintained by the tunnel client.

8. A method for transparently proxying connections based on hostnames, comprising:

receiving a request to make a connection to a remote host specified by an internet protocol (IP) address in the request;

querying a hostname lookup table to determine a hostname associated with the IP address for the remote host;

identifying a policy based on the hostname associated with the IP address for the remote host; and

routing the connection based on the policy.

9. The method of claim 8 , further comprising

identifying an application initiating the request to make the connection;

determining that the application is identified in a list of managed applications; and

wherein querying the locally stored hostname lookup table occurs in response to determining that the application is identified in the list of managed applications.

10. The method of claim 8 , further comprising:

receiving a domain name service (DNS) query from an application initiating the request to make the connection;

resolving the DNS query; and

providing a DNS response to the application initiating the request to make the connection.

11. The method of claim 8 , wherein routing the connection based on the policy further comprises sending a response to the request from the network driver, the response comprising a command to the network driver for how to establish the connection with a remote host.

12. The method of claim 8 , wherein the policy specifies that the connection is to be routed through a bypassed connection.

13. The method of claim 8 , wherein the policy specifies that the connection is to be blocked.

14. The method of claim 8 , wherein the policy specifies that the connection is to be routed through a tunneled connection maintained by the tunnel client.

15. A non-transitory computer-readable medium comprising machine-readable instructions for transparently proxying connections based on hostnames that, when executed by a process of a computing device, cause the computing device to at least:

receive a request to make a connection to a remote host specified by an internet protocol (IP) address in the request;

query a hostname lookup table to determine a hostname associated with the IP address for the remote host;

identify a policy based on the hostname associated with the IP address for the remote host; and

route the connection based on the policy.

16. The non-transitory computer-readable medium of 15 , wherein the machine-readable instructions, when executed, further cause the computing device to at least:

identify an application initiating the request to make the connection;

determine that the application is identified in a list of managed applications; and

wherein the query of the locally stored hostname lookup table occurs in response to determining that the application is identified in the list of managed applications.

17. The non-transitory computer-readable medium of 15 , wherein the machine-readable instructions, when executed, further cause the computing device to at least:

receive a domain name service (DNS) query from an application initiating the request to make the connection;

resolve the DNS query; and

provide a DNS response to the application initiating the request to make the connection.

18. The non-transitory computer-readable medium of 15 , wherein the policy specifies that the connection is to be routed through a bypassed connection.

19. The non-transitory computer-readable medium of 15 , wherein the policy specifies that the connection is to be routed through a tunneled connection.

20. The non-transitory computer-readable medium of 15 , wherein the policy specifies that the connection is to be blocked.