Embodiments include a method directed to a first proxy detecting that a secure data connection between a first and second client should be created on a secure data connection setup path. A first secure connection can be established with the first client. If a second proxy can reach the second client and the second proxy supports secure data connection setup paths, a second secure connection can be established with the second proxy causing the second proxy to establish a third secure connection with the second client. A session key indicating the secure data connection setup path can be received from the second client via the second proxy and forwarded to the first client. A request and session key can be received from the first client to initiate the secure data connection. The request is forwarded to the second client via the first and second proxies based on the session key.