Scramjet Proxy Work

The framework operates as a client-side interception proxy using the following technical mechanisms:

Wisp Protocol: It often utilizes the Wisp protocol, which multiplexes multiple TCP and UDP sockets over a single WebSocket connection. This reduces connection overhead and improves speed on complex pages. Key Components Quickstart - Scramjet - Mintlify scramjet proxy work

Isolated Browsing Contexts: The framework enables the creation of isolated browsing contexts. This allows users to browse multiple sites simultaneously within a single web application without session leakage, as Scramjet manages a centralized cookie jar and unique request routing for each session. Core Functionalities and "Work" Mechanisms The framework operates as a client-side interception proxy

Component 5: Control Plane (gRPC API)

• Allows dynamic reconfiguration (add routes, change rate limits) without restarting.
• Exports Prometheus metrics: scramjet_flows_active, scramjet_transformation_latency_us.

); navigator.serviceWorker.register( , { scope: scramjet.init(); // Create a proxied iframe and navigate

3.3. Security & Access Control

• Scope Limitation: The proxy should restrict access to the Sequence's filesystem and environment variables. Only network traffic should be passed.
• Header Injection: The proxy must inject metadata headers (e.g., X-Sequence-ID, X-Instance-ID) into the request before forwarding it to the app context.
• TLS Termination: The proxy feature must handle SSL/TLS termination to offload cryptographic overhead from the lightweight Sequence processes.

Sandboxing and Security: Scramjet sandboxes arbitrary web content to bypass CORS (Cross-Origin Resource Sharing) restrictions. This enables users to load and debug websites inside the browser that would otherwise be blocked by standard security policies. ); navigator

Sophisticated Rewriting: Once a request is intercepted, the Scramjet engine rewrites the outgoing URLs and incoming responses. This process ensures that all sub-resources (like a YouTube video's data stream or a Discord websocket) stay within the "proxied" environment, preventing "leaks" that could be blocked by a filter.