Abstract: A system and method are provided of bridging proxy traffic in an electronic network. The method can include the operation of receiving a data stream from a client into a packet scanning device using a first socket. This data stream can be directed to an external communication network. The socket information for the first socket can be cached or stored in a cache in the packet scanning device using a cache ID. The first socket can then be connected to a user space process. A second socket can be generated by the user space process using the cache ID. The second socket can be modified using information retrieved from the cache based on the cache ID to make the second socket emulate the first socket. An additional operation is sending the data stream through the second socket to the external communication network.

Abstract: A system and method are provided of bridging proxy traffic in an electronic network. The method can include the operation of receiving a data stream from a client into a packet scanning device using a first socket. This data stream can be directed to an external communication network. The socket information for the first socket can be cached or stored in a cache in the packet scanning device using a cache ID. The first socket can then be connected to a user space process. A second socket can be generated by the user space process using the cache ID. The second socket can be modified using information retrieved from the cache based on the cache ID to make the second socket emulate the first socket. An additional operation is sending the data stream through the second socket to the external communication network.

Abstract: A system and method are provided for blocking anonymous proxy traffic. The method can include the operation of receiving a data stream from an electronic communication network. Another operation can be checking the data stream to determine whether the data stream is being sent over a defined port number. The data stream that is not being sent over the defined port number can be tested to determine whether the data stream is a connected data stream. A user can be blocked from receiving the connected data stream that is not being sent over the defined port number.

Abstract: A system and method are provided for managing network traffic to and from network nodes on a localized computer network. The method includes the operation of receiving data streams to and from the network nodes on the localized computer network. A user associated with each of the data streams can also be identified. A further operation is selecting a user rule for the data streams associated with each identified user. The user rule defines bandwidth allocation among the users. An application class for each of the data streams can be identified. An additional operation is selecting an application class rule for the data streams associated with each application class. The application class rule defines bandwidth allocation among the application classes. Another operation is provisioning bandwidth to the data stream used for transporting network traffic based on a combination of the user rule and the application class rule.