公开(公告)号：US08856369B2

公开(公告)日：2014-10-07

申请号：US14081483

申请日：2013-11-15

Applicant: Citrix Systems, Inc.

Inventor： Pratap Ramachandra ,  Akshat Choudhary ,  Mugdah Agarwal ,  Arkesh Kumar

IPC: G06F15/16 ,  H04L29/12 ,  H04L12/24 ,  H04L29/06

CPC classification number: H04L41/0806 ,  H04L29/12207 ,  H04L61/20 ,  H04L63/166

Abstract: In a multi-core system, multiple packet engines across corresponding cores may be working concurrently processing data packets from data flows of SSL VPN sessions. For example, a first core may establish a SSL VPN session with a client. Any one of the other cores, such as a second core, may received packets related to the session owned by the first core. Embodiments of the systems and method described below provide management of IIP addresses for the multi-core/multi-packet engine approach to providing SSL VPN service. In some embodiments, the approach to managing IIP addresses is to have one packet engine on a core act as a master or controller of the IIPs for the remaining packet engines and cores. The packet engines/cores use a protocol for communications regarding IIP management.

Abstract translation: 在多核系统中，跨相应内核的多个数据包引擎可能同时处理来自SSL VPN会话数据流的数据包。 例如，第一个核心可以与客户端建立SSL VPN会话。 诸如第二核心的其他核心中的任何一个可以接收与由第一核心拥有的会话相关的分组。 下面描述的系统和方法的实施例提供了用于提供SSL VPN服务的多核/多分组引擎方法的IIP地址的管理。 在一些实施例中，管理IIP地址的方法是使核上的一个分组引擎作为剩余分组引擎和核心的IIP的主机或控制器。 分组引擎/内核使用关于IIP管理的通信协议。

公开(公告)号：US20140143394A1

公开(公告)日：2014-05-22

申请号：US14081483

申请日：2013-11-15

Applicant: Citrix Systems, Inc.

Inventor： Pratap Ramachandra ,  Akshat Choudhary ,  Mugdah Agarwal ,  Arkesh Kumar

IPC: H04L12/24

CPC classification number: H04L41/0806 ,  H04L29/12207 ,  H04L61/20 ,  H04L63/166

Abstract: In a multi-core system, multiple packet engines across corresponding cores may be working concurrently processing data packets from data flows of SSL VPN sessions. For example, a first core may establish a SSL VPN session with a client. Any one of the other cores, such as a second core, may received packets related to the session owned by the first core. Embodiments of the systems and method described below provide management of IIP addresses for the multi-core/multi-packet engine approach to providing SSL VPN service. In some embodiments, the approach to managing IIP addresses is to have one packet engine on a core act as a master or controller of the IIPs for the remaining packet engines and cores. The packet engines/cores use a protocol for communications regarding IIP management.

Abstract translation: 在多核系统中，跨相应内核的多个数据包引擎可能同时处理来自SSL VPN会话数据流的数据包。 例如，第一个核心可以与客户端建立SSL VPN会话。 诸如第二核心的其他核心中的任何一个可以接收与由第一核心拥有的会话相关的分组。 下面描述的系统和方法的实施例提供了用于提供SSL VPN服务的多核/多分组引擎方法的IIP地址的管理。 在一些实施例中，管理IIP地址的方法是使核上的一个分组引擎作为剩余分组引擎和核心的IIP的主机或控制器。 分组引擎/内核使用关于IIP管理的通信协议。

公开(公告)号：US10726029B2

公开(公告)日：2020-07-28

申请号：US15427775

申请日：2017-02-08

Applicant: Citrix Systems, Inc.

Inventor： Akshat Choudhary ,  Pratap Ramachandra

IPC: H04L29/08 ,  G06F16/2458 ,  G06F16/25

Abstract: The present application is directed towards systems and methods for selecting a database from a plurality of databases to forward a SQL query request based on a property of the SQL request. A device intermediary to a plurality of clients and databases may establish a plurality of connections to the plurality of databases. The device may receive, from a client of the plurality of clients, a request to execute a SQL query. The device may evaluate one or more properties of the request to execute the SQL query responsive to a policy. The device may select a database from the plurality of databases based on a result of evaluation of the one or more properties of the request to execute the SQL query. The device may forward the request to execute the SQL query to the selected database via a connection of the plurality of connections.

公开(公告)号：US09992167B2

公开(公告)日：2018-06-05

申请号：US14733280

申请日：2015-06-08

Applicant: Citrix Systems, Inc.

Inventor： Arkesh Kumar ,  Pratap Ramachandra

IPC: H04L29/06 ,  H04L29/08 ,  G06F21/10 ,  G06F21/60

CPC classification number: H04L63/0272 ,  G06F21/10 ,  G06F21/105 ,  G06F21/604 ,  G06F2221/2141 ,  H04L63/0823 ,  H04L63/10 ,  H04L63/105 ,  H04L63/166 ,  H04L67/141

Abstract: The present invention is directed towards systems and methods for sharing licenses across resources via a multi-core intermediary device. A device intermediary to a plurality of clients and a server may grant a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client. A second core of the plurality of cores may receive a first request from the client to establish an application connection between an application and a server via the VPN session. The second core may send a second request to the first core to share the license of the VPN session responsive to determining that the first core owns the VPN session. The second core may establish the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.

公开(公告)号：US08909756B2

公开(公告)日：2014-12-09

申请号：US13966681

申请日：2013-08-14

Applicant: Citrix Systems, Inc.

Inventor： Ravindranath Thakur ,  Pratap Ramachandra ,  Arkesh Kumar

IPC: H04L29/08 ,  H04L12/701 ,  H04L12/771

CPC classification number: H04L67/14 ,  H04L45/00 ,  H04L45/56

Abstract: The present application is directed towards systems and methods for managing server initiated connections via a multi-core system that provides VPN access between clients and servers. The solution described herein provides a mechanism by which server and client communications via the multi-core system for a server initiated connection may be received on different cores and for the system to manage these communications across different cores to provide an end-to-end connectivity between the client and the server.

Abstract translation: 本申请涉及用于通过在客户端和服务器之间提供VPN访问的多核系统来管理服务器发起的连接的系统和方法。 本文描述的解决方案提供了一种机制，通过该机制，可以在不同的核上接收用于服务器发起的连接的经由多核系统的服务器和客户端通信，并且系统可以跨不同核心管理这些通信以提供端到端连接 在客户端和服务器之间。

公开(公告)号：US20170147656A1

公开(公告)日：2017-05-25

申请号：US15427775

申请日：2017-02-08

Applicant: Citrix Systems, Inc.

Inventor： Akshat Choudhary ,  Pratap Ramachandra

IPC: G06F17/30 ,  H04L29/08

CPC classification number: G06F16/2471 ,  G06F16/256 ,  H04L67/2814

Abstract: The present application is directed towards systems and methods for selecting a database from a plurality of databases to forward a SQL query request based on a property of the SQL request. A device intermediary to a plurality of clients and databases may establish a plurality of connections to the plurality of databases. The device may receive, from a client of the plurality of clients, a request to execute a SQL query. The device may evaluate one or more properties of the request to execute the SQL query responsive to a policy. The device may select a database from the plurality of databases based on a result of evaluation of the one or more properties of the request to execute the SQL query. The device may forward the request to execute the SQL query to the selected database via a connection of the plurality of connections.

公开(公告)号：US20150271141A1

公开(公告)日：2015-09-24

申请号：US14733280

申请日：2015-06-08

Applicant: Citrix Systems, Inc.

Inventor： Arkesh Kumar ,  Pratap Ramachandra

IPC: H04L29/06 ,  H04L29/08 ,  G06F21/10

CPC classification number: H04L63/0272 ,  G06F21/10 ,  G06F21/105 ,  G06F21/604 ,  G06F2221/2141 ,  H04L63/0823 ,  H04L63/10 ,  H04L63/105 ,  H04L63/166 ,  H04L67/141

Abstract: The present invention is directed towards systems and methods for sharing licenses across resources via a multi-core intermediary device. A device intermediary to a plurality of clients and a server may grant a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client. A second core of the plurality of cores may receive a first request from the client to establish an application connection between an application and a server via the VPN session. The second core may send a second request to the first core to share the license of the VPN session responsive to determining that the first core owns the VPN session. The second core may establish the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.

Abstract translation: 本发明涉及通过多核中间设备跨资源共享许可的系统和方法。 多个客户机和服务器的设备中介可以向客户机授予由设备的多个核心的第一核心建立的虚拟专用网（VPN）会话的许可证。 多个核心的第二核心可以接收来自客户端的第一请求，以经由VPN会话在应用和服务器之间建立应用连接。 响应于确定第一核心拥有VPN会话，第二核心可以向第一核心发送第二请求以共享VPN会话的许可证。 第二核心可以响应于从第一核心接收到接受第二请求以共享VPN会话的许可的响应来建立应用连接。

公开(公告)号：US20140095725A1

公开(公告)日：2014-04-03

申请号：US13966681

申请日：2013-08-14

Applicant: Citrix Systems, Inc.

Inventor： Ravindranath Thakur ,  Pratap Ramachandra ,  Arkesh Kumar

IPC: H04L29/08

CPC classification number: H04L67/14 ,  H04L45/00 ,  H04L45/56

Abstract: The present application is directed towards systems and methods for managing server initiated connections via a multi-core system that provides VPN access between clients and servers. The solution described herein provides a mechanism by which server and client communications via the multi-core system for a server initiated connection may be received on different cores and for the system to manage these communications across different cores to provide an end-to-end connectivity between the client and the server.

Abstract translation: 本申请涉及用于通过在客户端和服务器之间提供VPN访问的多核系统来管理服务器发起的连接的系统和方法。 本文描述的解决方案提供了一种机制，通过该机制，可以在不同的核上接收用于服务器发起的连接的经由多核系统的服务器和客户端通信，并且系统可以跨不同核心管理这些通信以提供端到端连接 在客户端和服务器之间。