Supporting options in a communication session using a TCP cookie
AssigneeCisco Technology, Inc.
InventorsDan Touitou, Michael Zayats, Rajan Goyal
Life of this patent
Estimating the term…
Abstract
A defender operable to support options in a communication session intercepts a connection request packet sent from a client to a server. The defender identifies a client option combination associated with the client from the connection request packet. The defender establishes a client option index corresponding to the client option combination, and encodes the client option index into a cookie of an acknowledgment packet. The defender then sends the acknowledgment packet to the client.
Claims20
A method for supporting options in a communication session, comprising:
- intercepting a connection request packet sent from a client to a server, the connection request packet intercepted by a defender;
- identifying a client option combination from the connection request packet, the client option combination associated with the client;
- establishing a client option index corresponding to the client option combination;
- encoding the client option index into a cookie of an acknowledgment packet;
- and
- sending the acknowledgment packet to the client.
A defender operable to support options in a communication session, comprising:
- an interface operable to:
- intercept a connection request packet sent from a client to a server;
- and
- a processor coupled to the interface and operable to:
- identify a client option combination from the connection request packet, the client option combination associated with the client;
- establish a client option index corresponding to the client option combination;
- encode the client option index into a cookie of an acknowledgment packet;
- and
- the interface further operable to:
- send the acknowledgment packet to the client.
A defender operable to support options in a communication session, comprising:
- means for receiving a connection request packet from a client, the connection request packet directed to a server;
- means for identifying a client option combination from the connection request packet, the client option combination associated with the client;
- means for establishing a client option index corresponding to the client option combination;
- means for encoding the client option index into a cookie of an acknowledgment packet;
- and
- means for sending the acknowledgment packet to the client.
A method for supporting options in a communication session, comprising:
- recording a client option combination in a connection request packet, the client option combination associated with a client, the client option combination recorded in the connection request packet by the client;
- sending the connection request packet to a server, the server protected by a defender operable to intercept the connection request packet;
- and
- receiving an acknowledgment packet from the defender, a client option index encoded into a cookie of the acknowledgment packet, the client option index corresponding to the client option combination.
A client operable to support options in a communication session, comprising:
- a processor operable to:
- record a client option combination in a connection request packet, the client option combination associated with the client;
- an interface coupled to the processor and operable to:
- send the connection request packet to a server, the server protected by a defender operable to intercept the connection request packet;
- and
- receive an acknowledgment packet from the defender, a client option index encoded into a cookie of the acknowledgment packet, the client option index corresponding to the client option combination.
A client operable to support options in a communication session, comprising:
- means for recording a client option combination in a connection request packet, the client option combination associated with a client, the client option combination recorded in the connection request packet by the client;
- means for sending the connection request packet to a server, the server protected by a defender operable to intercept the connection request packet;
- and
- means for receiving an acknowledgment packet from the defender, a client option index encoded into a cookie of the acknowledgment packet, the client option index corresponding to the client option combination.
Dependencies are inferred from the claim text.