Traceroutes through external proxies
Techniques for using traceroute with tunnels and cloud-based systems for determining measures of network performance are presented. Systems and methods include identifying one or more of a proxy and a tunnel in a network path, determining a relative location of the proxy and the tunnel in the network path, performing a plurality of traces, for a plurality of legs of the network path based on the locations of the proxy and the tunnel, and aggregating details related to the plurality of legs of the network path to provide a holistic view of the network. The different protocols include Internet Control Message Protocol (ICMP), Transmission Control Protocol (TCP), and User Datagram Protocol (UDP).
1. A method comprising steps of
identifying one or more of a proxy and a tunnel in a network path;
determining a relative location of the proxy and the tunnel in the network path;
performing a plurality of traces, for a plurality of legs of the network path based on the locations of the proxy and the tunnel; and
aggregating details related to the plurality of legs of the network path to provide a holistic view of the network.
2. The method of claim 1 , wherein the plurality of traces utilize different protocols including Internet Control Message Protocol (ICMP), Transmission Control Protocol (TCP), and User Datagram Protocol (UDP).
3. The method of claim 2 , wherein the relative locations of the proxy and the tunnel are determined based on responses to ICMP, TCP, and UDP probes.
4. The method of claim 3 , wherein the steps further comprise:
sending a Hypertext Transfer Protocol (HTTP) request to a proxy domain or Internet Protocol (IP) address;
monitoring headers of a response to the HTTP request; and
determining the relative locations of the proxy and the tunnel based on the headers.
5. The method of claim 1 , wherein the steps are performed by an application executed on a user device.
6. The method of claim 1 , wherein the plurality of traces include a reverse trace to the proxy from an enforcement node, and a forward trace to a destination.
7. The method of claim 1 , wherein the proxy is an external proxy.
8. The method of claim 1 , wherein the aggregating details includes aggregating network hops, packet drops, and latency for each of the plurality of legs.
9. A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors to perform steps of:
identifying one or more of a proxy and a tunnel in a network path;
determining a relative location of the proxy and the tunnel in the network path;
performing a plurality of traces, for a plurality of legs of the network path based on the locations of the proxy and the tunnel; and
aggregating details related to the plurality of legs of the network path to provide a holistic view of the network.
10. The non-transitory computer-readable medium of claim 9 , wherein the plurality of traces utilize different protocols including Internet Control Message Protocol (ICMP), Transmission Control Protocol (TCP), and User Datagram Protocol (UDP).
11. The non-transitory computer-readable medium of claim 10 , wherein the relative locations of the proxy and the tunnel are determined based on responses to ICMP, TCP, and UDP probes.
12. The non-transitory computer-readable medium of claim 11 , wherein the steps further comprise:
sending a Hypertext Transfer Protocol (HTTP) request to a proxy domain or Internet Protocol (IP) address;
monitoring headers of a response to the HTTP request; and
determining the relative locations of the proxy and the tunnel based on the headers.
13. The non-transitory computer-readable medium of claim 9 , wherein the steps are performed by an application executed on a user device.
14. The non-transitory computer-readable medium of claim 9 , wherein the plurality of traces include a reverse trace to the proxy from an enforcement node, and a forward trace to a destination.
15. The non-transitory computer-readable medium of claim 9 , wherein the proxy is an external proxy.
16. The non-transitory computer-readable medium of claim 9 , wherein the aggregating details includes aggregating network hops, packet drops, and latency for each of the plurality of legs.
17. A cloud-based system comprising:
one or more processors and memory storing instructions that, when executed, cause the one or more processors to:
identify one or more of a proxy and a tunnel in a network path;
determine a relative location of the proxy and the tunnel in the network path;
perform a plurality of traces, for a plurality of legs of the network path based on the relative locations of the proxy and the tunnel; and
aggregate details related to the plurality of legs of the network path to provide a holistic view of the network.
18. The cloud-based system of claim 17 , wherein the plurality of traces utilize different protocols including Internet Control Message Protocol (ICMP), Transmission Control Protocol (TCP), and User Datagram Protocol (UDP).
19. The cloud-based system of claim 18 , wherein the steps further comprise:
sending a Hypertext Transfer Protocol (HTTP) request to a proxy domain or Internet Protocol (IP) address;
monitoring headers of a response to the HTTP request; and
determining the relative locations of the proxy and the tunnel based on the headers.
20. The cloud-based system of claim 1 , wherein the plurality of traces include a reverse trace to the proxy from an enforcement node, and a forward trace to a destination.