Troubleshoot routing issues
The tables in this section provide details about how BlackBerry Access Secure Enterprise Browser routes traffic depending on whether a manual proxy or proxy autoconfiguration (PAC) is used. You can use this information to troubleshoot browsing issues related to traffic routing.
Legend
- No proxy: The proxy server is not specified in the BlackBerry Access app configuration.
- Manual proxy: A web proxy server is manually specified in the BlackBerry Access app configuration. When a web proxy is specified in this way, BlackBerry Access attempts to route all traffic through the web proxy.
- PAC: A PAC file is specified in the BlackBerry Access app configuration. BlackBerry Access follows the rules to decide whether traffic goes through the web proxy. The PAC file returns DIRECT, PROXY, BLOCK, or NATIVE for the target host.
- Host route = BBP: The specified target URL is configured to route through a BlackBerry Proxy cluster based on the BlackBerry Dynamics Connectivity profile. This URL is explicitly defined, or is under the Default Route or an Allowed domains rule.
- Host route = DIRECT: The specified target URL is configured to route directly based on the BlackBerry Dynamics Connectivity profile. This URL is explicitly defined or is under the Default Route.
- Web Proxy Route = BBP: The proxy server's URL is configured to route through a BlackBerry Proxy cluster based on the BlackBerry Dynamics Connectivity profile. This URL is explicitly defined, or is under the Default Route or an Allowed domains rule.
- Web proxy route = DIRECT: The proxy server's URL is configured to route directly based on the BlackBerry Dynamics Connectivity profile. This URL is explicitly defined or is under the Default Route.
Setting |
Routing |
|---|---|
|
No proxy Host route = BBP | BlackBerry Access routes traffic through the BlackBerry Proxy cluster. |
|
No proxy Host route = DIRECT | BlackBerry Access routes traffic directly to the host. |
|
Manual proxy Host route = BBP Web proxy route = BBP | BlackBerry Access routes traffic through the BlackBerry Proxy cluster and then through the web proxy. |
|
Manual proxy Host route = DIRECT Web proxy route = BBP | BlackBerry Access routes traffic through the BlackBerry Proxy cluster and then through the web proxy. Note: Even though the host does not resolve in the BlackBerry Dynamics Connectivity profile, the web proxy does resolve. All traffic through the web proxy goes through the BlackBerry Proxy cluster.
|
|
Manual proxy Host route = BBP Web proxy route = DIRECT | BlackBerry Access routes traffic directly to the web proxy and then to the host. Note: Even though the host resolves in the BlackBerry Dynamics Connectivity profile, because the web proxy is configured as DIRECT, all traffic through that web proxy is direct.
|
|
Manual proxy Host route = DIRECT Web proxy route = DIRECT | BlackBerry Access routes traffic directly to the web proxy and then to the host. |
|
PAC returns DIRECT Host route = BBP | BlackBerry Access routes traffic directly to the host. |
|
PAC returns PROXY Host route = BBP Web proxy route = BBP | BlackBerry Access routes traffic through the BlackBerry Proxy cluster and then through the web proxy. Note: Even though the host does not resolve in the BlackBerry Dynamics Connectivity profile, the web proxy does resolve. All traffic through the web proxy goes through the BlackBerry Proxy cluster.
|
|
PAC returns PROXY Host route = DIRECT Web proxy route = BBP | BlackBerry Access routes traffic directly to the web proxy and then to the host. Note: Even though the host resolves in the BlackBerry Dynamics Connectivity profile, because the web proxy is configured as DIRECT, all traffic through that web proxy is direct.
|
|
PAC returns PROXY Host route = BBP Web proxy route = DIRECT | BlackBerry Access routes traffic directly to the web proxy and then to the host. |
|
PAC returns PROXY Host route = DIRECT Web proxy route = DIRECT | BlackBerry Access routes traffic directly to the web proxy and then to the host. |
Behavior of myIPAddress and DNSResolve
Depending on the routing configuration, the DNS resolution and the source IP address will differ. The following table describes which endpoint makes the DNS calls and which endpoint is considered the source IP address when connecting to a target host.
|
DNSResolve during PAC computation |
DNSResolve for socket connection | MyIPAddress for PAC | |
|---|---|---|---|
|
Host route = BBP | The BlackBerry Proxy resolves the IP address of the host. | The BlackBerry Proxy resolves the IP address of the host. | The IP address of the BlackBerry Proxy is used. |
|
Host route = DIRECT | The BlackBerry Proxy resolves the IP address of the host. | DNSResolve is blocked or there is no DNS resolution. | The IP address of the BlackBerry Proxy is used. |
Host route = DIRECT | The BlackBerry Proxy resolves the IP address of the host. | The device resolves the IP address of the host. | The IP address of the device is used. |