Compares incoming TCP/IP connection latency with WebSocket latency measured via JavaScript. A significant mismatch reveals proxy tunneling.
TCP/IP Latency is measured passively from the server side by analyzing the timing of the TCP handshake and subsequent packets in the connection flow.
WebSocket Latency is measured actively via JavaScript. The browser opens a WebSocket and sends multiple ping messages; the round-trip times are recorded.
Comparison: If WebSocket latency is significantly higher than TCP/IP latency, traffic is likely being routed through a proxy tunnel, adding measurable overhead.