Citrix Systems, Inc.

Seth Kenneth Keith

Mustafa Kutluk Testicioglu

Steve Jackowski

Daljit Singh

Ratnesh Singh Thakur

Yao Li

Kasirao Velugu

Rama Rao Katta

Lampros Dounis

Steven J Jackowski

Ralph Alexander Wondra

Mike Ovsiannikov

Rakesh Kumar Thangellapalli

Kutluk Testicioglu

Aman Agrawal

Josephine Suganthi Joseph Leo

Praveen Dandin

Krishna Khanal

Saravanakumar Annamalaisami

Dalijit Singh

Ralph Wondra

Described embodiments improve the performance of a computer network via selectively forwarding packets to bypass quality of service (QoS) processing, avoiding processing delays during critical periods of high demand, increasing throughput and efficiency may be increased by sacrificing a small amount of QoS accuracy. QoS processing may be applied to a subset of packets of a flow or connection, referred to herein as 'lazy' processing or lazy byte batching. Packets that bypass QoS processing may be immediately forwarded with the same QoS settings as packets of the flow for which QoS processing is applied, resulting in tremendous overhead savings with only minimal decline in accuracy. In case of backlog, packets may be collected together into an aggregated or 'uber' packet, with QoS processing applied based on a virtual size of the aggregated packet.

Increased packet scheduling throughput and efficiency using über batching

Reducing vulnerability to a server is provided. A device intermediary to a client and a server can receive a RPC message from the RPC based client to the RPC based server, the RPC message having a plurality of fields to execute one or more routines on the server. The device can detect that one or more fields of the plurality of fields exploits a vulnerability of the RPC based server. The device can modify the RPC message to remove the one or more fields from the RPC message. The device can forward the modified RPC message to the RPC server.

Node security with intermediate devices

Described embodiments provide systems and methods for detecting autonomous programs is provided. A device, intermediary to a plurality of clients and a plurality of servers, can receive a first request from a first client of the plurality of clients to a server of the plurality of servers via a connection between the device and the first client. The device can include, into a response from the server to the first client, a uniform resource locator (URL) comprising one or more randomly generated characters within a predetermined character space. The device can determine that the first client has an autonomous program responsive to receiving a second request from the first client using the URL. The device can terminate, responsive to the determination, the connection to the first client.

Generating URLs to detect autonomous programs systems and methods

Described embodiments improve the performance of a computer network via selectively forwarding packets to bypass quality of service (QoS) processing, avoiding processing delays during critical periods of high demand, increasing throughput and efficiency may be increased by sacrificing a small amount of QoS accuracy. QoS processing may be applied to a subset of packets of a flow or connection, referred to herein as 'lazy' processing or lazy byte batching. Packets that bypass QoS processing may be immediately forwarded with the same QoS settings as packets of the flow for which QoS processing is applied, resulting in tremendous overhead savings with only minimal decline in accuracy.

Increasing QoS throughput and efficiency through lazy byte batching

A computer system is provided. The computer system includes a memory, a network interface, and a processor coupled to the memory and the network interface. The processor is configured to receive a response to a request to verify whether an ostensible client of a service is actually a client or a bot, the response including an indicator of whether the ostensible client is a client or a bot; receive information descriptive of interoperations between the ostensible client and the service that are indicative of whether the ostensible client is a client or a bot; and train a plurality of machine learning classifiers using the information and the indicator to generate a next generation of the plurality of machine learning classifiers.

Adaptive anomaly detector

Increased packet scheduling throughput and efficiency using &#xfa;ber batching

The embodiments are directed to methods and appliances for scheduling a packet transmission. The methods and appliances can assign received data packets or a representation of data packets to one or more connection nodes of a classification tree having a link node and first and second intermediary nodes associated with the link node via one or more semi-sorted queues, wherein the one or more connection nodes correspond with the first intermediary node. The methods and appliances can process the one or more connection nodes using a credit-based round robin queue. The methods and appliances can authorize the sending of the received data packets based on the processing.

Method for prioritizing network packets at high bandwidth speeds

A method comprising: receiving, by a first network packet scheduler, from each other network packet scheduler of a plurality of network packet schedulers, a virtual packet for each traffic class of a plurality of traffic classes defining relative transmission priority of network packets; receiving, by the first network packet scheduler, a network packet of a first traffic class of the plurality of traffic classes; transmitting, by the first network packet scheduler, each virtual packet into a virtual connection of a plurality of virtual connections created for each traffic class; scheduling, by the first network packet scheduler, a network packet or a virtual packet as a next packet in a buffer for transmission; determining, by the first network packet scheduler, that the next packet in the buffer is a virtual packet; and discarding, by the first network packet scheduler, the virtual packet, responsive to the determination that the next packet in the buffer is a virtual packet.

Method for packet scheduling using multiple packet schedulers

A system and method is provided for optimizing network traffic. The system includes a packet engine of a plurality of packet engines configured to acquire a data packet, to store the data packet in a queue, and to provide a request including a packet token representing the data packet, information regarding the size of the data packet, and a connection token. The system also includes a packet scheduler configured to receive the request; schedule the data packet using the connection token and the information regarding the size of the data packet; and provide the packet token and a notification to the packet engine for allowing the packet engine for transmitting the data packet.

High-performance quality-of-service packet scheduling for multiple packet processing engines

A system and method is provided for scheduling data packets. The system includes one or more packet engines configured to provide one or more congestion indications for a plurality of connections of a communication link. The system also includes a packet scheduler configured to receive the one or more congestion indications, estimate a link rate of the communication link using the one or more congestion indications and classification information, and schedule the data packets for transmission via the plurality of connections using the estimated link rate and the classification information.

Performing QoS on unknown bandwidths through rate estimating TCP congestion handlers

The embodiments are directed to methods and appliances for configuring a classification tree. The methods and appliances, can receive data packets having a source media access control (MAC) address. The methods and appliances can encode the source MAC address based on a determination of a message type. The methods and appliances can provide the encoded source MAC address to a quality-of-service (QoS) engine, wherein the encoded source MAC address configures the classification tree used by the QoS engine for authorizing the transmission of one or more data packets.

Efficient in-band communication of quality-of-service policies between virtual classification devices and enforcement devices

The present invention is directed towards systems and methods for providing discovery of applications for classification of a network packet for performing QoS and acceleration techniques. Remote display protocol traffic associated with a new application not previously included in a list of predetermined applications may be parsed for application information, and the new application may be added to the application list. The remote display protocol traffic may then be classified according to the new application, and network performance may be enhanced and optimized by providing QoS and acceleration engines with packet- or data-specific information corresponding to the newly identified application.

Growing community of inventors

Scotts Valley, CA, United States of America

Seth Kenneth Keith