-
公开(公告)号：US11025601B2
公开(公告)日：2021-06-01
申请号：US16209070
申请日：2018-12-04
Applicant: Citrix Systems, Inc.
Inventor： J Mohan Rao Arisankala , Chaitra Maraliga Ramaiah , Karthick Srivatsan
Abstract: Described embodiments provide systems and apparatuses for enhanced quality of service, steering and policy enforcement for https traffic via intelligent in-line path discovery of a TLS terminating node. The system may include a first network device having a secure connection traversing through the first network device, and in communication with a second network device. The first network device and the second network device may be intermediary to a client device and a server. The first network device may determine that the second network device terminates the secure connection. The first network device may receive key generation information of the secure connection from the second network device following determining the second network device terminates the secure connection. The first network device may decipher packet(s) of the secure connection destined for the device or the server using the received key generation information, to regulate network traffic of the secure connection at the first network device.
-
公开(公告)号：US10862976B2
公开(公告)日：2020-12-08
申请号：US16446739
申请日：2019-06-20
Applicant: CITRIX SYSTEMS, INC.
Inventor： Praveen Raja Dhanabalan , Chaitra Maraliga Ramaiah , Akshata Bhat
Abstract: A system for optimizing network traffic is described. An appliance operates within a cluster of appliances. The appliance includes one or more network interfaces to facilitate a first secure session between a client device and the appliance, and a second secure session between the appliance and a server. One of the network interfaces is configured to receive a secure connection request to the server. A secure session exchange module acquires a message from another appliance, with the message indicating that the other appliance is acting as a primary instance for the server. The secure session exchange module determines whether a valid primary instance for the server exist, and requests from the other appliance at least one session-related parameter based on determination of existence of the valid primary instance for the server. A session to the server is used based on at least one session-related parameter acquired from the other appliance.
-
公开(公告)号：US10778591B2
公开(公告)日：2020-09-15
申请号：US15970007
申请日：2018-05-03
Applicant: Citrix Systems, Inc.
Inventor： Chaitra Maraliga Ramaiah , Praveen Raja Dhanabalan
IPC: H04L12/807 , H04L12/801 , H04L29/06 , H04L12/875 , H04L12/851
Abstract: A system for optimizing network traffic is described. The system includes a transport communication protocol (TCP) controller configured to acquire data regarding a flow of a plurality of data packets over a link and to determine TCP characteristics for the flow, a traffic prioritization module configured to assign a flow priority to the flow, and a traffic priority controller configured detect congestion on the link and determine a congestion window size for the flow based on the flow priority and the TCP characteristics.
-
公开(公告)号：US20190020594A1
公开(公告)日：2019-01-17
申请号：US16133347
申请日：2018-09-17
Applicant: Citrix Systems, Inc.
Inventor： Praveen Raja Dhanabalan , Chaitra Maraliga Ramaiah
IPC: H04L12/863 , H04L12/851
Abstract: A system for optimizing network traffic is described. The system includes a quality of service (QoS) engine configured to acquire information regarding a plurality of data packets comprising a plurality of data packet flows operating over a plurality of links. The QoS engine can be further configured to determine a flow priority to the plurality of data packets flows, and to determine TCP characteristics for the plurality of data packet flows. The system further includes a TCP controller configured to acquire the flow priority to the plurality of data packets from the QoS engine. The TCP controller can be configured to obtain queue information associated with the plurality of data packets, and adjust a receive window size based on the flow priority and the queue information.
-
公开(公告)号：US10091124B2
公开(公告)日：2018-10-02
申请号：US14846417
申请日：2015-09-04
Applicant: Citrix Systems, Inc.
Inventor： Praveen Raja Dhanabalan , Chaitra Maraliga Ramaiah
IPC: H04J1/16 , H04L12/863 , H04L12/851
Abstract: A system for optimizing network traffic is described. The system includes a quality of service (QoS) engine configured to acquire information regarding a plurality of data packets comprising a plurality of data packet flows operating over a plurality of links. The QoS engine can be further configured to determine a flow priority to the plurality of data packets flows, and to determine TCP characteristics for the plurality of data packet flows. The system further includes a TCP controller configured to acquire the flow priority to the plurality of data packets from the QoS engine. The TCP controller can be configured to obtain queue information associated with the plurality of data packets, and adjust a receive window size based on the flow priority and the queue information.
-
Patent Agency Ranking
26.发明申请公开(公告)号：US20170214625A1
公开(公告)日：2017-07-27
申请号：US15004677
申请日：2016-01-22
Applicant: Citrix Systems, Inc.
IPC: H04L12/851 , H04L12/801
CPC classification number: H04L47/2433 , H04L47/12
Abstract: An appliance o for evicting data based on traffic priority of data is described. The appliance has one or more processors and includes a compression history manager configured to acquire traffic priority information of data, the data being conveyed over a connection and to assign a compression history set based on the traffic priority information of the data. The compression history manager is also configured to, if cache space does not exist to store the data and another compression history set corresponds to lower traffic priority in a cache queue, evict data from the other compression history set corresponding to lower traffic priority.
-
公开(公告)号：US11804984B2
公开(公告)日：2023-10-31
申请号：US17323569
申请日：2021-05-18
Applicant: Citrix Systems, Inc.
Inventor： Karthick Srivatsan , Chaitra Maraliga Ramaiah , Anand Medikeri , Rajnesh Raturi , Moorthi Subramaniyan , Sandeep Manohar Nirikhi
CPC classification number: H04L12/4633 , H04L9/0643 , H04L12/4641 , H04L45/02 , H04L45/64 , H04L45/66 , H04L45/7453
Abstract: Described embodiments provide systems and methods of forming overlay tunnels for delivery of data between networked devices. A first intermediary device may transmit, responsive to a connection request from a client, a request having a source IP address corresponding to a first virtual IP address of the first device and a first payload including first security hash information to be processed by a second intermediary device. The first device may receive, from the second intermediary device, a response. The response may have a source IP address corresponding to the IP address of the server and a second payload including a virtual IP address of the second device, responsive to second security hash information corresponding to the first security hash information. The first device may establish an overlay tunnel using the first virtual IP address and the second virtual IP address for communicating data between the client and the server.
-
公开(公告)号：US11647005B2
公开(公告)日：2023-05-09
申请号：US17501476
申请日：2021-10-14
Applicant: Citrix Systems, Inc.
CPC classification number: H04L63/0428 , G06F16/9577 , H04L9/0838 , H04L63/0884 , H04L67/14 , H04L67/535 , H04L67/63
Abstract: Embodiments described include systems and methods for management and pre-establishment of network application and secure communication sessions. Session logs may be analyzed to identify an application or secure communication sessions likely to be accessed, and prior to receiving a request to establish the session, an intermediary (e.g. another device such as an intermediary appliance or other device, or an intermediary agent on a client such as a client application) may pre-establish the session, performing any necessary handshaking or credential or key exchange processes. When the session is subsequently requested (e.g. in response to a user request), the system may immediately begin using the pre-established session. This pre-establishment may be coordinated within the enterprise providing load balancing and scheduling of session establishment to prevent large processing loads at any one point in time.
-
公开(公告)号：US11153285B2
公开(公告)日：2021-10-19
申请号：US16183232
申请日：2018-11-07
Applicant: Citrix Systems, Inc.
IPC: H04L29/06 , G06F16/957 , H04L9/08 , H04L29/08
Abstract: Embodiments described include systems and methods for management and pre-establishment of network application and secure communication sessions. Session logs may be analyzed to identify an application or secure communication sessions likely to be accessed, and prior to receiving a request to establish the session, an intermediary (e.g. another device such as an intermediary appliance or other device, or an intermediary agent on a client such as a client application) may pre-establish the session, performing any necessary handshaking or credential or key exchange processes. When the session is subsequently requested (e.g. in response to a user request), the system may immediately begin using the pre-established session. This pre-establishment may be coordinated within the enterprise providing load balancing and scheduling of session establishment to prevent large processing loads at any one point in time.
-
公开(公告)号：US11044117B2
公开(公告)日：2021-06-22
申请号：US16232451
申请日：2018-12-26
Applicant: Citrix Systems, Inc.
Inventor： Karthick Srivatsan , Chaitra Maraliga Ramaiah , Anand Medikeri , Rajnesh Raturi , Moorthi Subramaniyan , Sandeep Manohar Nirikhi
IPC: H04L12/46 , H04L12/751 , H04L12/715 , H04L12/743 , H04L12/721 , H04L9/06
Abstract: Described embodiments provide systems and methods of forming overlay tunnels for delivery of data between networked devices. A first intermediary device may transmit, responsive to a connection request from a client, a request having a source IP address corresponding to a first virtual IP address of the first device and a first payload including first security hash information to be processed by a second intermediary device. The first device may receive, from the second intermediary device, a response. The response may have a source IP address corresponding to the IP address of the server and a second payload including a virtual IP address of the second device, responsive to second security hash information corresponding to the first security hash information. The first device may establish an overlay tunnel using the first virtual IP address and the second virtual IP address for communicating data between the client and the server.
-
-
-
-
-
-
-
-
-
Search Results
36
records
(took 0.022 seconds)
