公开(公告)号：US11336683B2

公开(公告)日：2022-05-17

申请号：US16654867

申请日：2019-10-16

Applicant: Citrix Systems, Inc.

Inventor： Venkata Subba Rao Gorrepati ,  Jubin Jose ,  Ranjith Nath ,  Sathaiah Dontula

IPC: H04L29/06

Abstract: Disclosed herein includes a system, a method, and a device for preventing replay attacks in a cluster. A first node in the cluster having a plurality of nodes can receive an indication of a node event. The first node can access a first sequence number from a storage corresponding to a previous communication between the plurality of nodes. The first node can adjust the first sequence number by a delta indicative of an average number of communications between the plurality of nodes in the cluster in a determined time period to generate a second sequence number. The first node can transmit a packet including the second sequence number to the plurality of nodes in the cluster. The second sequence number can be used by the plurality of nodes to reset a starting sequence number for communications between the plurality of nodes to prevent replay attacks in the cluster.

公开(公告)号：US20190045015A1

公开(公告)日：2019-02-07

申请号：US15670749

申请日：2017-08-07

Applicant: Citrix Systems, Inc.

Inventor： Sandhya Gopinath ,  Sathaiah Dontula ,  Ranjith Nath

IPC: H04L29/08 ,  H04L12/24

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

公开(公告)号：US20210120033A1

公开(公告)日：2021-04-22

申请号：US16654867

申请日：2019-10-16

Applicant: Citrix Systems, Inc.

Inventor： Venkata Subba Rao Gorrepati ,  Jubin Jose ,  Ranjith Nath ,  Sathaiah Dontula

IPC: H04L29/06

Abstract: Disclosed herein includes a system, a method, and a device for preventing replay attacks in a cluster. A first node in the cluster having a plurality of nodes can receive an indication of a node event. The first node can access a first sequence number from a storage corresponding to a previous communication between the plurality of nodes. The first node can adjust the first sequence number by a delta indicative of an average number of communications between the plurality of nodes in the cluster in a determined time period to generate a second sequence number. The first node can transmit a packet including the second sequence number to the plurality of nodes in the cluster. The second sequence number can be used by the plurality of nodes to reset a starting sequence number for communications between the plurality of nodes to prevent replay attacks in the cluster.

公开(公告)号：US11750704B2

公开(公告)日：2023-09-05

申请号：US17394719

申请日：2021-08-05

Applicant: Citrix Systems, Inc.

Inventor： Sandhya Gopinath ,  Sathaiah Dontula ,  Ranjith Nath

IPC: H04L67/142 ,  H04L41/0806 ,  H04L67/104 ,  H04L67/1008 ,  H04L67/1023 ,  H04L69/40 ,  H04L67/10 ,  H04L45/7453 ,  H04L43/028

CPC classification number: H04L67/142 ,  H04L41/0806 ,  H04L67/1046 ,  H04L43/028 ,  H04L45/7453 ,  H04L67/10 ,  H04L67/1008 ,  H04L67/1023 ,  H04L69/40

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

公开(公告)号：US20210368009A1

公开(公告)日：2021-11-25

申请号：US17394719

申请日：2021-08-05

Applicant: Citrix Systems, Inc.

Inventor： Sandhya Gopinath ,  Sathaiah Dontula ,  Ranjith Nath

IPC: H04L29/08 ,  H04L12/24

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

公开(公告)号：US11089113B2

公开(公告)日：2021-08-10

申请号：US15670749

申请日：2017-08-07

Applicant: Citrix Systems, Inc.

Inventor： Sandhya Gopinath ,  Sathaiah Dontula ,  Ranjith Nath

IPC: H04L29/08 ,  H04L12/24 ,  H04L29/14 ,  H04L12/743 ,  H04L12/26

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.