公开(公告)号：US20140185482A1

公开(公告)日：2014-07-03

申请号：US14143588

申请日：2013-12-30

Applicant: Citrix Systems, Inc.

Inventor： Steve Jackowski ,  Seth Keith ,  Mike Ovsiannikov

IPC: H04L12/26

CPC classification number: H04L43/0894 ,  H04L43/028 ,  H04L47/2441 ,  H04L47/2475 ,  H04L63/0281 ,  H04L63/0428

Abstract: The present invention is directed towards systems and methods for providing classification of an encrypted network packet for performing QoS and acceleration techniques. Encrypted packets may be classified by a first classifier at a first portion of a network stack of a device as corresponding to a first predetermined application, and an application identifier may be included with the packet. In some embodiments, the packets may be decrypted in an order dependent on a first classification of the encrypted network packet. After decryption, packets may be reclassified as corresponding to a second predetermined application by a second classifier operating at a second portion of a network stack of the device above the first portion. Thus, network performance may be enhanced and optimized by providing QoS and acceleration engines with packet- or data-specific information corresponding to the application, while avoiding inefficiencies due to a lack of prioritization of decryption.

Abstract translation: 本发明涉及用于提供用于执行QoS和加速技术的加密网络分组的分类的系统和方法。 加密分组可以由与第一预定应用相对应的设备的网络堆栈的第一部分处的第一分类器分类，并且应用标识符可以包括在分组中。 在一些实施例中，分组可以以取决于加密网络分组的第一分类的顺序被解密。 在解密之后，可以通过在第一部分上方的设备的网络堆栈的第二部分操作的第二分类器将分组重新分类为对应于第二预定应用。 因此，可以通过向QoS和加速引擎提供与应用相对应的分组或数据特定信息，同时避免由于缺乏解密优先级而导致的低效率，可以增强和优化网络性能。

公开(公告)号：US09294378B2

公开(公告)日：2016-03-22

申请号：US14143588

申请日：2013-12-30

Applicant: Citrix Systems, Inc.

Inventor： Steve Jackowski ,  Seth Keith ,  Mike Ovsiannikov ,  Daljit Singh

IPC: H04L12/26 ,  H04L12/851 ,  H04L12/859 ,  H04L29/06

CPC classification number: H04L43/0894 ,  H04L43/028 ,  H04L47/2441 ,  H04L47/2475 ,  H04L63/0281 ,  H04L63/0428

Abstract: The present invention is directed towards systems and methods for providing classification of an encrypted network packet for performing QoS and acceleration techniques. Encrypted packets may be classified by a first classifier at a first portion of a network stack of a device as corresponding to a first predetermined application, and an application identifier may be included with the packet. In some embodiments, the packets may be decrypted in an order dependent on a first classification of the encrypted network packet. After decryption, packets may be reclassified as corresponding to a second predetermined application by a second classifier operating at a second portion of a network stack of the device above the first portion. Thus, network performance may be enhanced and optimized by providing QoS and acceleration engines with packet- or data-specific information corresponding to the application, while avoiding inefficiencies due to a lack of prioritization of decryption.

Abstract translation: 本发明涉及用于提供用于执行QoS和加速技术的加密网络分组的分类的系统和方法。 加密分组可以由与第一预定应用相对应的设备的网络堆栈的第一部分处的第一分类器分类，并且应用标识符可以包括在分组中。 在一些实施例中，分组可以以取决于加密网络分组的第一分类的顺序被解密。 在解密之后，可以通过在第一部分上方的设备的网络堆栈的第二部分操作的第二分类器将分组重新分类为对应于第二预定应用。 因此，可以通过向QoS和加速引擎提供与应用相对应的分组或数据特定信息，同时避免由于缺乏解密优先级而导致的低效率，可以增强和优化网络性能。