Non-HTTP layer 7 protocol applications running in the browser

1. A method, comprising:

receiving, at a server from a browser executing on a client device, an HTTP request;

transmitting, to the browser executing on the client device, a response to the HTTP request, wherein the response includes code that when executed by the browser executing on the client device, executes a non-HTTP layer 7 protocol client that communicates with a non-HTTP layer 7 protocol service at an external network;

receiving, from the non-HTTP layer 7 protocol client executing in the browser, data related to the non-HTTP layer 7 protocol service;

proxying the data related to the non-HTTP layer 7 protocol service over a layer 4 tunnel that is interfaced with the non-HTTP layer 7 protocol service; and

logging event data received from the non-HTTP layer 7 protocol client executing in the browser.

2. The method of claim 1 , wherein the code is in a WebAssembly format.

3. The method of claim 1 , wherein the non-HTTP layer 7 protocol client is a Secure Shell Protocol (SSH) client, wherein the non-HTTP layer 7 protocol service is a SSH server, and wherein the SSH client executes in a tab of the browser.

4. The method of claim 1 , wherein the data related to the non-HTTP layer 7 protocol service is received over a WebSocket between the browser and the server.

5. The method of claim 1 , further comprising:

determining, based on a set of one or more policies configured for a domain of the HTTP request, that the HTTP request is allowed to be processed, wherein the set of one or more policies are based on one or more of identity, device posture, location, and/or risk signals.

6. The method of claim 1 , further comprising:

authenticating a user of the non-HTTP layer 7 protocol client with the non-HTTP layer 7 protocol service.

7. The method of claim 6 , wherein authenticating the user includes performing one of: presenting a login prompt, presenting a prompt for a public key, and automatically performing a certificate generation and authentication.

8. A non-transitory machine-readable storage medium that provides instructions that, if executed by a processor, will cause said processor to perform operations including:

receiving, at a server from a browser executing on a client device, an HTTP request;

transmitting, to the browser executing on the client device, a response to the HTTP request, wherein the response includes code that when executed by the browser executing on the client device, executes a non-HTTP layer 7 protocol client that communicates with a non-HTTP layer 7 protocol service at an external network;

receiving, from the non-HTTP layer 7 protocol client executing in the browser, data related to the non-HTTP layer 7 protocol service;

proxying the data related to the non-HTTP layer 7 protocol service over a layer 4 tunnel that is interfaced with the non-HTTP layer 7 protocol service; and

logging event data received from the non-HTTP layer 7 protocol client executing in the browser.

9. The non-transitory machine-readable storage medium of claim 8 , wherein the code is in a WebAssembly format.

10. The non-transitory machine-readable storage medium of claim 8 , wherein the non-HTTP layer 7 protocol client is a Secure Shell Protocol (SSH) client, wherein the non-HTTP layer 7 protocol service is a SSH server, and wherein the SSH client executes in a tab of the browser.

11. The non-transitory machine-readable storage medium of claim 8 , wherein the data related to the non-HTTP layer 7 protocol service is received over a WebSocket between the browser and the server.

12. The non-transitory machine-readable storage medium of claim 8 , wherein the operations further comprise:

determining, based on a set of one or more policies configured for a domain of the HTTP request, that the HTTP request is allowed to be processed, wherein the set of one or more policies are based on one or more of identity, device posture, location, and/or risk signals.

13. The non-transitory machine-readable storage medium of claim 8 , wherein the operations further comprise:

authenticating a user of the non-HTTP layer 7 protocol client with the non-HTTP layer 7 protocol service.

14. The non-transitory machine-readable storage medium of claim 13 , wherein authenticating the user includes performing one of: presenting a login prompt, presenting a prompt for a public key, and automatically performing a certificate generation and authentication.

15. A server, comprising:

a processor; and

a non-transitory machine-readable storage medium that provides instructions that, if executed by the processor, will cause the server to perform operations including:

receiving, at the server from a browser executing on a client device, an HTTP request;

transmitting, to the browser executing on the client device, a response to the HTTP request, wherein the response includes code that when executed by the browser executing on the client device, executes a non-HTTP layer 7 protocol client that communicates with a non-HTTP layer 7 protocol service at an external network;

receiving, from the non-HTTP layer 7 protocol client executing in the browser, data related to the non-HTTP layer 7 protocol service;

proxying the data related to the non-HTTP layer 7 protocol service over a layer 4 tunnel that is interfaced with the non-HTTP layer 7 protocol service; and

logging event data received from the non-HTTP layer 7 protocol client executing in the browser.

16. The server of claim 15 , wherein the code is in a WebAssembly format.

17. The server of claim 15 , wherein the non-HTTP layer 7 protocol client is a Secure Shell Protocol (SSH) client, wherein the non-HTTP layer 7 protocol service is a SSH server, and wherein the SSH client executes in a tab of the browser.

18. The server of claim 15 , wherein the data related to the non-HTTP layer 7 protocol service is received over a WebSocket between the browser and the server.

19. The server of claim 15 , wherein the operations further comprise:

determining, based on a set of one or more policies configured for a domain of the HTTP request, that the HTTP request is allowed to be processed, wherein the set of one or more policies are based on one or more of identity, device posture, location, and/or risk signals.

20. The server of claim 15 , wherein the operations further comprise:

authenticating a user of the non-HTTP layer 7 protocol client with the non-HTTP layer 7 protocol service.

21. The server of claim 20 , wherein authenticating the user includes performing one of: presenting a login prompt, presenting a prompt for a public key, and automatically performing a certificate generation and authentication.