US 2013/0174242 A1 · Remote Access Manager for Virtual Computing Services

Abstract

A remote access manager in a virtual computing services environment negotiates a time limited NAT routing rule to establish a connection between a remote device and virtual desktop resource providing user computing services. A series of NAT connection rules are revised in a dynamic manner such that a pool of ports is available to connect a plurality of remote users to local virtual compute resources over one or more public IP addresses. Once a connection is established, an entry is made in a firewall state table such that the firewall state table allows uninterrupted use of the established connection. After an entry has been made in the state table, or the routing rule has timed out, the port associated with the original NAT routing rule is removed and the same port can be re-used to establish another connection without disrupting active connections.

Claims20

Dependent claims

A method for associating a remote device to a local host to establish a network connection comprising:

receiving a user login request from a remote device identified by a remote device identifier;
authenticating the user login request and associating a connection access identifier and a local host identifier, the connection access identifier indicative of the local host designated for the authenticated user;
creating a temporary routing rule to allow an initial connection, the rule defining a route via the connection access identifier to the local host;
receiving a TCP/IP connection request from the remote device using the connection access identifier;
adding an entry to a firewall state table to associate the remote device identifier with the local host identifier;
removing the temporary routing rule such that subsequent requests for connection to the host via the same connection access identifier are ignored;
and
routing subsequent communication between the remote device and the local host using the entry in the firewall state table and the established connection.

5 more elements

A method of network port reuse for establishing network connections between local hosts and remote user devices comprising:

receiving, at a gateway node, an indication of authentication of a user for receipt of computing services, the user having a user device address;
sending, to the user device, a port identifier generated for establishing a virtual computing session with the user;
establishing, in an address mapping table at the gateway node, a rule responsive to the port identifier and user device address, the rule indicative of a compute session for providing computing services to the user;
receiving, at the gateway node, the connection request from the user, the connection request including the port identifier and emanating from the user device address;
establishing a connection between the user device address and an address indicative of the compute session;
generating an entry in a firewall state table, the firewall state table for controlling access to the gateway node, the generated entry defining an allowed connection between the user device address and the address of the compute session, the firewall state table having a higher routing precedence than the address mapping table;
removing the established rule from the address mapping table, the removed rule preventing access via the user address and sent port number, the port number remaining available for successive connection requests;
and
maintaining the generated entry for permitting successive communications between the user device address and the compute session

6 more elements

Dependencies are inferred from the claim text.

Remote Access Manager for Virtual Computing Services

Life of this patent

Remote Access Manager for Virtual Computing Services

Life of this patent

Abstract

Claims20