workstation, laptop, phone private server(s) clientclientstunnel_clientstunnel_clientstunnel_serverstunnel_serversquid_proxysquid_proxyICAPservICAPservCherryPyCherryPywebsitewebsite127.0.0.1:8080ICAPserv pubsub CherryPy busrequest websitesrv.ip:443authauthrequest website (tls)127.0.0.1:3128requestREQMODrequestresponseRESPMODHTMLinjectedresponseresponse website (tls)respone websiterequest dataanalyse websiterss webmentionsendpoints etcupdate injected website SSEdata update