Delayed proxy-less network address translation decision based on application payload

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• responsive to communication of a client handshake from a client to a server for establishing communications between the client and the server, managing handshake messages between the client and the server until an application layer message is communicated from the client, such that during the managing of the handshake messages, from a perspective of the client, a connection between the client and the server appears to be fully established;
• and
• responsive to communication of the application layer message from the client:
• rendering a policy decision with respect to a connection between the client and the server based on a payload of the application layer message, the policy decision defining a selected path between the client and the server and including a chosen target device from a plurality of potential target devices, wherein the chosen target device is within the selected path;
• and
• establishing the selected path for communication between the client and the server in accordance with the policy decision.
• opening at least one path between the client and the server;
• and

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• responsive to communication of a client handshake from a client to a server for establishing communications between the client and the server, managing handshake messages between the client and the server until an application layer message is communicated from the client, such that during the managing of the handshake messages, from a perspective of the client, a connection between the client and the server appears to be fully established;
• and
• responsive to communication of the application layer message from the client:
• rendering a policy decision with respect to a connection between the client and the server based on a payload of the application layer message, the policy decision defining a selected path between the client and the server and including a chosen target device from a plurality of potential target devices, wherein the chosen target device is within the selected path;
• and
• establishing the selected path for communication between the client and the server in accordance with the policy decision.