Nitriding-proxy tunnels network traffic between nitriding and the Internet by creating a tun-based virtual network interface that's connected to the enclave's tun interface. A single TCP connection between nitriding-proxy and nitriding is forwarding traffic back and forth.
The diagram above illustrates the architecture. The yellow components are under your control: clients, the enclave application, and the network traffic between clients and the enclave application. Nitriding-proxy tunnels your network traffic over a VSOCK-based point-to-point TCP connection between nitriding-proxy and nitriding. The diagram above shows a client making an HTTPS request to the enclave.
Compile and run nitriding-proxy by running:
make run
Take a look at this wiki page to learn more about traffic throughput.