公开(公告)号：US09825853B2

公开(公告)日：2017-11-21

申请号：US14162541

申请日：2014-01-23

Applicant: Citrix Systems, Inc.

Inventor： Dinesh Gandhewar ,  Josephine Suganthi

IPC: H04L12/741 ,  H04L29/06 ,  H04L12/26

CPC classification number: H04L45/74 ,  H04L43/0823 ,  H04L63/0227

Abstract: The present invention is directed towards a method for using a listening policy for a virtual server on an intermediary device. An intermediary device establishes for a first virtual server a first listening policy with an expression for evaluating packets received by the intermediary device to determine whether the packet may access the first virtual server. The intermediary device listens for packets at a first internet protocol (IP) address and a first port specified for the first virtual server. Then, the intermediary device evaluates the expression of the first listening policy to a first packet received at the first IP address and first port and determines whether to provide the first packet to the first virtual server based on a result of the evaluation.

公开(公告)号：US20140133315A1

公开(公告)日：2014-05-15

申请号：US14162541

申请日：2014-01-23

Applicant: Citrix Systems, Inc.

Inventor： Dinesh Gandhewar ,  Josephine Suganthi

IPC: H04L12/741 ,  H04L12/26

CPC classification number: H04L45/74 ,  H04L43/0823 ,  H04L63/0227

Abstract: The present invention is directed towards a method for using a listening policy for a virtual server on an intermediary device. An intermediary device establishes for a first virtual server a first listening policy with an expression for evaluating packets received by the intermediary device to determine whether the packet may access the first virtual server. The intermediary device listens for packets at a first internet protocol (IP) address and a first port specified for the first virtual server. Then, the intermediary device evaluates the expression of the first listening policy to a first packet received at the first IP address and first port and determines whether to provide the first packet to the first virtual server based on a result of the evaluation.

Abstract translation: 本发明涉及一种在中间设备上使用用于虚拟服务器的监听策略的方法。 中间设备为第一虚拟服务器建立具有用于评估中间设备接收的分组的表达式的第一监听策略，以确定分组是否可以访问第一虚拟服务器。 中间设备在第一互联网协议（IP）地址和为第一虚拟服务器指定的第一端口侦听分组。 然后，中间设备将第一监听策略的表达式评估为在第一IP地址和第一端口接收的第一包，并且基于评估结果确定是否向第一虚拟服务器提供第一包。