-
公开(公告)号:US20220394034A1
公开(公告)日:2022-12-08
申请号:US17340494
申请日:2021-06-07
Applicant: Citrix Systems, Inc.
Inventor: Seth K. Keith , Saravanakumar Annamalaisami , Krishna Khanal , Ratnesh Singh Thakur
Abstract: Reducing vulnerability to a server is provided. A device intermediary to a client and a server can receive a RPC message from the RPC based client to the RPC based server, the RPC message having a plurality of fields to execute one or more routines on the server. The device can detect that one or more fields of the plurality of fields exploits a vulnerability of the RPC based server. The device can modify the RPC message to remove the one or more fields from the RPC message. The device can forward the modified RPC message to the RPC server.
-
12.
公开(公告)号:US10084711B2
公开(公告)日:2018-09-25
申请号:US15207080
申请日:2016-07-11
Applicant: Citrix Systems, Inc.
Inventor: Mustafa Kutluk Testicioglu , Seth K. Keith
IPC: H04L12/851 , H04L12/863 , H04L12/873 , H04L12/813 , H04L12/753
CPC classification number: H04L47/24 , H04L45/48 , H04L47/20 , H04L47/52 , H04L47/628
Abstract: A system and method is provided for optimizing network traffic. The system includes a packet engine of a plurality of packet engines configured to acquire a data packet, to store the data packet in a queue, and to provide a request including a packet token representing the data packet, information regarding the size of the data packet, and a connection token. The system also includes a packet scheduler configured to receive the request; schedule the data packet using the connection token and the information regarding the size of the data packet; and provide the packet token and a notification to the packet engine for allowing the packet engine for transmitting the data packet.
-
公开(公告)号:US09813352B2
公开(公告)日:2017-11-07
申请号:US13975161
申请日:2013-08-23
Applicant: Citrix Systems, Inc.
Inventor: Mustafa Kutluk Testicioglu , Seth K. Keith
IPC: H04L12/863 , H04L12/851 , H04L12/873
CPC classification number: H04L47/6225 , H04L47/2441 , H04L47/527 , H04L47/6295
Abstract: The embodiments are directed to methods and appliances for scheduling a packet transmission. The methods and appliances can assign received data packets or a representation of data packets to one or more connection nodes of a classification tree having a link node and first and second intermediary nodes associated with the link node via one or more semi-sorted queues, wherein the one or more connection nodes correspond with the first intermediary node. The methods and appliances can process the one or more connection nodes using a credit-based round robin queue. The methods and appliances can authorize the sending of the received data packets based on the processing.
-
-