公开(公告)号：US11522855B2

公开(公告)日：2022-12-06

申请号：US16937030

申请日：2020-07-23

Applicant: Oracle International Corporation

Inventor： Bhaskar Mathur ,  Feroz Alam Khan ,  Abhishek Dadhich ,  Kant C. Patel

IPC: H04L29/06 ,  H04L9/40 ,  G06F21/62

Abstract: Embodiments establish a pool of tunnel connections using a secure protocol. A pool of tunnels can be initiated from endpoint connection managers to cloud connection managers, where a request is received from the endpoint connection managers by the cloud connection managers. A request from a cloud client to communicate with a secure computing device using a first of the endpoint connection managers is received at a first of the cloud connection managers. One of the pool of tunnels that is connected to the first endpoint connection manager is identified. The identified tunnel is configured to connect the cloud client and the first endpoint connection manager.

公开(公告)号：US11122019B2

公开(公告)日：2021-09-14

申请号：US16570364

申请日：2019-09-13

Applicant: Oracle International Corporation

Inventor： Abhishek Dadhich ,  Kant C. Patel ,  Feroz Alam Khan ,  Bhaskar Mathur ,  Srinivas Pamu

IPC: H04L29/06 ,  H04L29/08

Abstract: Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.