公开(公告)号：US09077754B2

公开(公告)日：2015-07-07

申请号：US13858011

申请日：2013-04-06

Applicant: Citrix Systems, Inc.

Inventor： Swarupa Gonuguntla ,  Ashoke Saha ,  Tushar Kanekar

IPC: H04L29/06 ,  G06F21/00

CPC classification number: H04L63/168 ,  H04L63/0281

Abstract: This disclosure is directed to systems and methods for handling the processing of a next protocol negotiation extension for a transport layer security (TLS) session. A device, intermediary to a client and a server, may receive a client hello message from the client in a handshake to establish a transport layer security (TLS) session with the server. The client hello message may include a next protocol negotiation extension. The device may include a first TLS processor that is software based and a second TLS processor that is hardware based. The device may determine that the client hello message includes the next protocol negotiation extension. The device may establish, responsive to the determination, the TLS session using the first TLS processor. The device may process, upon establishment of the TLS session using the first TLS processor, encrypted data for the TLS session using the second TLS processor.

Abstract translation: 本公开涉及用于处理传输层安全（TLS）会话的下一个协议协商扩展的处理的系统和方法。 客户机和服务器的中间设备可以在握手中从客户端接收客户端请求消息，以建立与服务器的传输层安全（TLS）会话。 客户端hello消息可以包括下一个协议协商扩展。 该设备可以包括基于软件的第一TLS处理器和基于硬件的第二TLS处理器。 设备可以确定客户端hello消息包括下一个协议协商扩展。 响应于确定，设备可以使用第一TLS处理器来建立TLS会话。 在使用第一TLS处理器建立TLS会话时，设备可以处理使用第二TLS处理器的TLS会话的加密数据。

公开(公告)号：US20220357988A1

公开(公告)日：2022-11-10

申请号：US17246217

申请日：2021-04-30

Applicant: CITRIX SYSTEMS, INC.

Inventor： Swarupa Gonuguntla ,  Ashoke Saha

IPC: G06F9/50

Abstract: A method may include determining a first weight for a first type of operation and a second weight for a second type of operation. The first weight may correspond to a first quantity of the first type of operation a hardware resource is capable of performing during a time interval. The second weight may correspond to a second quantity of the second type of operation the hardware resource is capable of performing during the time interval. Utilization of the hardware resource may correspond to a weighted sum of the respective quantities of the first type of operation and the second type of operation offloaded to the hardware resource. Allocation of hardware resources may be adjusted based on utilization. Related systems and articles of manufacture are also provided.

公开(公告)号：US20140304498A1

公开(公告)日：2014-10-09

申请号：US13858011

申请日：2013-04-06

Applicant: CITRIX SYSTEMS, INC.

Inventor： Swarupa Gonuguntla ,  Ashoke Saha ,  Tushar Kanekar

IPC: H04L29/06

CPC classification number: H04L63/168 ,  H04L63/0281

Abstract: This disclosure is directed to systems and methods for handling the processing of a next protocol negotiation extension for a transport layer security (TLS) session. A device, intermediary to a client and a server, may receive a client hello message from the client in a handshake to establish a transport layer security (TLS) session with the server. The client hello message may include a next protocol negotiation extension. The device may include a first TLS processor that is software based and a second TLS processor that is hardware based. The device may determine that the client hello message includes the next protocol negotiation extension. The device may establish, responsive to the determination, the TLS session using the first TLS processor. The device may process, upon establishment of the TLS session using the first TLS processor, encrypted data for the TLS session using the second TLS processor.

Abstract translation: 本公开涉及用于处理传输层安全（TLS）会话的下一个协议协商扩展的处理的系统和方法。 客户机和服务器的中间设备可以在握手中从客户端接收客户端请求消息，以建立与服务器的传输层安全（TLS）会话。 客户端hello消息可以包括下一个协议协商扩展。 该设备可以包括基于软件的第一TLS处理器和基于硬件的第二TLS处理器。 设备可以确定客户端hello消息包括下一个协议协商扩展。 响应于确定，设备可以使用第一TLS处理器来建立TLS会话。 在使用第一TLS处理器建立TLS会话时，设备可以处理使用第二TLS处理器的TLS会话的加密数据。