Intelligent routing and redirection techniques for optimal secure access to resources

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing instructions that, when executed, cause the one or more processors to perform operations comprising:
• determining that a first termination node associated with a first encrypted tunnel has received, via the first encrypted tunnel, a request for a resource from a client device such that a second termination node did not receive the request, wherein the first termination node receives the request for the resource instead of the second termination node based at least in part on a proximity of the first termination node to the client device and the first termination node being more optimal for handling tunneled traffic being send through the first encrypted tunnel;
• prior to resource traffic being sent to or received from the resource, determining that the second termination node that did not receive the request is more optimal than the first termination node for handling the resource traffic based at least in part on traffic constraints of the second termination node instead of the proximity of the first termination node to the client device;
• and
• based at least in part on determining that the second termination node is more optimal, causing a redirect of the tunneled traffic and the resource traffic so that the client device sends the tunneled traffic through a second encrypted tunnel to the second termination node and the resource traffic from the second termination node to the resource.

One or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform operations comprising:

• determining that a first termination node associated with a first encrypted tunnel has received, via the first encrypted tunnel, a request for a resource from a client device such that a second termination node did not receive the request, wherein the first termination node receives the request for the resource instead of the second termination node based at least in part on a proximity of the first termination node to the client device and the first termination node being more optimal for handling tunneled traffic being sent through the first encrypted tunnel;
• prior to resource traffic being sent to or received from the resource, determining that the second termination node that did not receive the request is more optimal than the first termination node for handling the resource traffic based at least in part on traffic constraints of the second termination node instead of the proximity of the first termination node to the client device;
• and
• based at least in part on determining that the second termination node is more optimal, causing a redirect of the tunneled traffic and the resource traffic so that the client device sends the tunneled traffic through a second encrypted tunnel to the second termination node and the resource traffic from the second termination node to the resource.