公开(公告)号：US10812448B2

公开(公告)日：2020-10-20

申请号：US15880930

申请日：2018-01-26

Applicant: Citrix Systems, Inc.

Inventor： Punit Gupta ,  Pintu Kumar

IPC: H04L29/12 ,  H04L29/06

Abstract: Described embodiments provide systems and methods for rewriting an URL in a message transmitted via a clientless SSL VPN session. An intermediary device may identify, in a HTTP response transmitted via the session, an absolute URL that includes a hostname of the server. The device may determine that the absolute URL includes an intranet domain name. The device may generate, responsive to the determination, a URL segment by combining a unique string corresponding to the hostname of the server, with a hostname of the device. The device may rewrite, responsive to the determination, the absolute URL by replacing the server hostname in the absolute URL with the generated URL segment. A DNS server for the client may be configured with a DNS entry comprising a wildcard combined with the device hostname, to cause the DNS server to resolve the rewritten absolute URL to an IP address of the device.

公开(公告)号：US10484336B2

公开(公告)日：2019-11-19

申请号：US15154227

申请日：2016-05-13

Applicant: Citrix Systems, Inc.

Inventor： Pintu Kumar ,  Punit Gupta ,  Vignesh Rajendran

IPC: H04L9/00 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12 ,  G06F16/95

Abstract: The present disclosure is directed towards systems and methods for rewriting a HTTP response transmitted via a clientless SSL VPN session. An intermediary device may identify, in a HTTP response transmitted via a clientless SSL VPN session, an absolute URL that includes a first hostname of the server. The device may provide a unique string corresponding to the first hostname of the server. The device may generate a URL segment by combining the unique string with a second hostname of the device. The device may rewrite the absolute URL by replacing the first hostname in the absolute URL with the generated URL segment. A domain name system (DNS) server for the client may be configured with a DNS entry comprising a wildcard combined with the second hostname, to cause the DNS server to resolve the rewritten absolute URL to an IP address of the device.

公开(公告)号：US11533289B2

公开(公告)日：2022-12-20

申请号：US17029366

申请日：2020-09-23

Applicant: Citrix Systems, Inc.

Inventor： Punit Gupta ,  Pintu Kumar

IPC: H04L61/3015 ,  H04L9/40 ,  H04L61/301 ,  H04L61/4511 ,  H04L61/2514 ,  H04L101/35 ,  H04L101/345

Abstract: Described embodiments provide systems and methods for rewriting an URL in a message transmitted via a clientless SSL VPN session. An intermediary device may identify, in a HTTP response transmitted via the session, an absolute URL that includes a hostname of the server. The device may determine that the absolute URL includes an intranet domain name. The device may generate, responsive to the determination, a URL segment by combining a unique string corresponding to the hostname of the server, with a hostname of the device. The device may rewrite, responsive to the determination, the absolute URL by replacing the server hostname in the absolute URL with the generated URL segment. A DNS server for the client may be configured with a DNS entry comprising a wildcard combined with the device hostname, to cause the DNS server to resolve the rewritten absolute URL to an IP address of the device.

公开(公告)号：US20170331789A1

公开(公告)日：2017-11-16

申请号：US15154227

申请日：2016-05-13

Applicant: Citrix Systems, Inc.

Inventor： Pintu Kumar ,  Punit Gupta ,  Vignesh Rajendran

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/46 ,  H04L29/12

CPC classification number: H04L63/0272 ,  G06F16/95 ,  H04L61/1511 ,  H04L61/301 ,  H04L61/3045 ,  H04L63/0281 ,  H04L63/0823 ,  H04L63/168 ,  H04L63/20 ,  H04L67/02 ,  H04L67/141

Abstract: The present disclosure is directed towards systems and methods for rewriting a HTTP response transmitted via a clientless SSL VPN session. An intermediary device may identify, in a HTTP response transmitted via a clientless SSL VPN session, an absolute URL that includes a first hostname of the server. The device may provide a unique string corresponding to the first hostname of the server. The device may generate a URL segment by combining the unique string with a second hostname of the device. The device may rewrite the absolute URL by replacing the first hostname in the absolute URL with the generated URL segment. A domain name system (DNS) server for the client may be configured with a DNS entry comprising a wildcard combined with the second hostname, to cause the DNS server to resolve the rewritten absolute URL to an IP address of the device.