# US 2023/0412690 A1 · Non-translated port oversubscribing for a proxy device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2023/0412690 A1
- Document ID: US20230412690A1
- Status: Published application
- Kind: A1
- Application number: 18/454,176
- Filed: 2023-08-23
- Published: 2023-12-21
- Earliest claimed: 2022-06-21
- Assignees: Juniper Networks, Inc.
- Applicants: Juniper Networks, Inc.
- Inventors: Abdul Kadhar Jeelany Habeeb MOHAMED; Hemachandran Karnam MOHAN; Girish Kumar Attimgere LINGAIAH
- Web page: https://patentgrep.com/patent/US20230412690A1

## CPC

- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 47/10: Flow control; Congestion control
- H04L 49/253: using establishment or release of connections between ports
- H04L 61/2517: using port numbers
- H04L 67/56: Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

In some implementations, a proxy device may intercept a client session associated with a client device and a destination device. The proxy device may allocate a first port of the proxy device as a source port of a proxy session for the client session. The proxy device may determine, based on allocating the first port, whether session information associated with the proxy session would match session information associated with another proxy session. The proxy device may initiate the proxy session. A source port of the proxy session is the first port of the proxy device based on a determination that the session information associated with the proxy session would not match session information associated with another proxy session, or is a second port of the proxy device based on a determination that the session information associated with the proxy session would match session information associated with another proxy session.

## Claims

### Claim 1

A method of oversubscribing for a proxy device, the method comprising:
allocating, by a proxy device, a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and
initiating, by the proxy device, the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port,
wherein the source port of the first proxy session is one of:
the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or
a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
storing mapping information that associates the first proxy session with the client session.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
allocating the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and
determining that the session information associated with the first proxy session would not match session information associated with a third proxy session.

### Claim 4 (depends on 1)

The method of claim 1, wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session.

### Claim 5 (depends on 1)

The method of claim 1, wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
storing the session information associated with the first proxy session.

### Claim 7 (depends on 1)

The method of claim 1, wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session.

### Claim 8

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a proxy device, cause the proxy device to:
allocate a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and
initiate the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port,
wherein the source port of the first proxy session is one of:
the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or
a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session.

### Claim 9 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the one or more instructions further cause the proxy device to:
store mapping information that associates the first proxy session with the client session.

### Claim 10 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the one or more instructions further cause the proxy device to:
allocate the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and
determine that the session information associated with the first proxy session would not match session information associated with a third proxy session.

### Claim 11 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session.

### Claim 12 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device.

### Claim 13 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the one or more instructions further cause the proxy device to:
store the session information associated with the first proxy session.

### Claim 14 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session.

### Claim 15

A proxy device, comprising:
one or more memories; and
one or more processors to:
allocate a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and
initiate the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port,
wherein the source port of the first proxy session is one of:
the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or
a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session.

### Claim 16 (depends on 15)

The proxy device of claim 15, wherein the one or more processors are further to:
store mapping information that associates the first proxy session with the client session.

### Claim 17 (depends on 15)

The proxy device of claim 15, wherein the one or more processors are further to:
allocate the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and
determine that the session information associated with the first proxy session would not match session information associated with a third proxy session.

### Claim 18 (depends on 15)

The proxy device of claim 15, wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session.

### Claim 19 (depends on 15)

The proxy device of claim 15, wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device.

### Claim 20 (depends on 15)

The proxy device of claim 15, wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session.
