function FindProxyForURL(url, host) {
    var lowerHost = host.toLowerCase();
    var egressip = "${SRCIP}";

    // Efficiently check if the client is in the school network using a single range
    if (isInNet(egressip, "152.22.32.0", "255.255.224.0") ||
        isInNet(egressip, "152.22.64.0", "255.255.224.0") ||
        isInNet(egressip, "152.22.96.0", "255.255.224.0")) {
        return "DIRECT";
    }

    // Check for private IPs or plain hostnames using a regex
    if (/^(0|10|127|192\.168|172\.1[6-9]|172\.2[0-9]|172\.3[0-1]|169\.254|192\.88\.99)\./.test(lowerHost)) {
        return "DIRECT";
    }

    // Bypass domains list
    var bypassDomains = [
        "zscalerone.net", "zscaler.com", "zscaler.net", "zpath.net", "microsoft.com",
        "manage.microsoft.com", "jamfcloud.com", "microsoftonline-p.com", "microsoftonline-p.net",
        "microsoftonline.com", "microsoftonlineimages.com", "microsoftonlinesupport.net", "msecnd.net",
        "microsoftazuread-sso.com", "msauth.net", "msftauth.net", "msftauthimages.net", "windows.net",
        "msocdn.com", "office.net", "office365.com", "live.com", "live.net", "sharepointonline.com", 
        "windowsupdate.com", "gfx.ms",
        
        // Apple & Mobile Management
        "apple.com", "mzstatic.com", "akadns.net", "edgesuite.net", "opendns.com", 
        "android.com", "mosyle.com", "mosyle.io",

        // Google & YouTube
        "1e100.net", "appspot.com", "ggpht.com", "gmail.com", "gmodules.com", "google.com", 
        "googleapis.com", "googletagmanager.com", "googleusercontent.com", "gstatic.com", 
        "gvt1.com", "gvt2.com", "yimg.com", "youtube.com", "ytimg.com", "googlegroups.com", 
        "google-analytics.com", "youtube-nocookie.com", "googlevideo.com", "yout-ube.com", 
        "googlesyndication.com", "doubleclick.net", "googleadservices.com", "googletagservices.com",

        // Education, Testing & Media Platforms
        "seesaw.me", "instructure.com", "ncssm.edu", "kahoot.it", "sciencecourseware.org", 
        "cshl.edu", "visiblebody.com", "edc.org", "berkeley.edu", "collegeboard.org", 
        "teachcyber.org", "codehs.com", "mit.edu", "padlet.org", "flip.com", "lucid.app", 
        "bandlab.com", "vectary.com", "photopea.com", "videoanalysis.app", "graphicalanalysis.app", 
        "trinket.io", "phyphox.org", "vieyrasoftware.net", "physlets.org", "adobedtm.com", 
        "boltdns.net", "newrelic.com", "nr-data.net", "psonsvc.net", "schoolnet.com", 
        "identitymgmt.net", "ncedcloud.org", "webtest.net", "cfnc.org", "piedmontcc.edu", 
        "blackboard.com", "blackboardcdn.com", "leaderinme.com", "leaderinme.org", "leaderinme.net", 
        "cloudfront.net", "company-target.com", "usg.edu", "zdassets.com", "zendesk.com", 
        "zopim.com", "explorelearning.com", "reflexmath.com", "istation.com", "letterland.com", 
        "cnx.org", "apexvs.com", "edready.org", "vidgrid.com", "ally.ac", "scholastic.com", 
        "brightcove.com", "brightcove.net", "demdex.net", "ted.com", "lexiapowerup.com", 
        "mylexia.com", "lexiacore5.com", "lexiarapid.com", "brainzilla.com", "wistia.com", 
        "generationgenius.com", "nr-data.com", "pearsonrealize.com", "pearson.com", "pk12ls.com.com", 
        "rebus.community", "brightcovecdn.com", "sas.com", "aeseducation.com", "squigglepark.com", 
        "explore-work.com", "wp.com", "campuslabs.com", "edgenuity.com", "edgenuity.us", 
        "middil.com", "education2020.com", "education2020.us", "edynamiclearning.com", 
        "speechstream.net", "ucopenaccess.org", "desmos.com", "onetonline.org", "pglms.org", 
        "k12hsn.org", "learnosity.com", "elluminate.com", "liveperson.net", "geniussis.com", 
        "agilixbuzz.com", "liveengage.com", "liveperson.com", "liveengage.net", "liveper.sn", 
        "lpsnmedia.net", "savvas.com", "savvasrealize.com", "savvaseasybridge.com", 
        "savvassuccessnet.com", "savvastexas.com", "mysavvastraining.com", "classviewappstore.com", 
        "boomlearning.com", "withgoogle.com", "presencelearning.com", "firebaseio.com", 
        "opentok.com", "tokbox.com", "salesforceliveagent.com", "samesurf.com", "webtype.com", 
        "loom.com", "ravenjs.com", "cloudflare.com", "heapanalytics.com", "ipinfo.io", 
        "qualaroo.com", "crazyegg.com", "unpkg.com", "icons8.com", "licdn.com", "speedof.me", 
        "amazonaws.com", "unicheck.com", "edpuzzle.com", "classroom.cloud", "safeshare.tv", 
        "safeshare.video", "safeyoutube.net", "dyknow.me", "dyknow.com", "studentontask.com", 
        "ed.gov", "studentaid.gov", "fontawesome.com", "humanesources.com", "imaginelearning.com", 
        "ncresidency.org", "ontocollege.com", "quizlet.com", "cd2learning.com", "bbc.com", 
        "deltamath.com", "sparknotes.com", "goguardian.com", "laptoplookout.com", "pusher.com", 
        "portalelevate.com", "mheducation.com", "act.org", "ncsu.edu", "abtech.edu"
    ];

    // Efficiently check for exact match or subdomain match
    for (var i = 0; i < bypassDomains.length; i++) {
        var domain = bypassDomains[i];
        if (lowerHost === domain || lowerHost.endsWith('.' + domain)) {
            return "DIRECT";
        }
    }

    // Default proxy route
    return "PROXY k12gapps-pri.zs.ncren.net:9443; PROXY k12gapps-sec.zs.ncren.net:9443";
}