Back to results
US 8,949,446 B2Granted
Establishing tunnels between selective endpoint devices along communication paths
AssigneeBlue Coat Systems, Inc.
InventorsQing Li, Yusheng Huang
Life of this patent
Estimating the term…
Abstract
In one embodiment, an intermediary device situated along a communication path between two endpoint devices may receive communication packets sent along the communication path. If the intermediary device receives a connection-initiating packet having a customization indicator and a connection-acknowledgement packet having a customization indicator, then the intermediary device may install a bypass rule.
Claims20
A method comprising:
- by a first computing device,
- receiving a first communication packet from a second computing device and addressed to a third computing device;
- if the first communication packet is a connection-initiating packet having no customization indicator, then:
- generating a second connection-initiating packet having a customization indicator with a first value and addressed to the third computing device;
- and
- sending the second connection-initiating packet to the third computing device;
- if the first communication packet is a connection-initiating packet having a customization indicator with the first value, then:
- generating a third connection-initiating packet having a customization indicator with a second value and addressed to the third computing device;
- and
- sending the third connection-initiating packet to the third computing device;
- if the first communication packet is a connection-initiating packet having a customization indicator with the second value, then:
- generating a first connection-acknowledgement packet having a customization indicator with the second value and addressed to the second computing device;
- and
- sending the first connection-acknowledgement packet to the second computing device;
- if the first communication packet is a connection-acknowledgement packet having no customization indicator, then:
- installing an intercept rule;
- generating a second connection-acknowledgement packet having a customization indicator with the second value and addressed to the second computing device;
- and
- sending the second connection-acknowledgement packet to the second computing device;
- and
- if the first communication packet is a connection-acknowledgement packet having a customization indicator with the second value, then:
- installing a bypass rule.
19 more elements
A first system comprising:
- a memory comprising instructions executable by one or more processors;
- and
- the one or more processors coupled to the memory and operable to execute the instructions, the one or more processors being operable when executing the instructions to:
- receive a first communication packet from a second system and addressed to a third system;
- if the first communication packet is a connection-initiating packet having no customization indicator, then:
- generate a second connection-initiating packet having a customization indicator with a first value and addressed to the third system;
- and
- send the second connection-initiating packet to the third system;
- if the first communication packet is a connection-initiating packet having a customization indicator with the first value, then:
- generate a third connection-initiating packet having a customization indicator with a second value and addressed to the third system;
- and
- send the third connection-initiating packet to the third system;
- if the first communication packet is a connection-initiating packet having a customization indicator with the second value, then:
- generate a first connection-acknowledgement packet having a customization indicator with the second value and addressed to the second system;
- and
- send the first connection-acknowledgement packet to the second system;
- if the first communication packet is a connection-acknowledgement packet having no customization indicator, then:
- install an intercept rule;
- generate a second connection-acknowledgement packet having a customization indicator with the second value and addressed to the second system;
- and
- send the second connection-acknowledgement packet to the second system;
- and
- if the first communication packet is a connection-acknowledgement packet having a customization indicator with the second value, then:
- install a bypass rule.
21 more elements
One or more computer-readable non-transitory storage media embodying software operable when executed by a first computer system to:
- receive a first communication packet from a second computer system and addressed to a third computer system;
- if the first communication packet is a connection-initiating packet having no customization indicator, then:
- generate a second connection-initiating packet having a customization indicator with a first value and addressed to the third computer system;
- and
- send the second connection-initiating packet to the third computer system;
- if the first communication packet is a connection-initiating packet having a customization indicator with the first value, then:
- generate a third connection-initiating packet having a customization indicator with a second value and addressed to the third computer system;
- and
- send the third connection-initiating packet to the third computer system;
- if the first communication packet is a connection-initiating packet having a customization indicator with the second value, then:
- generate a first connection-acknowledgement packet having a customization indicator with the second value and addressed to the second computer system;
- and
- send the first connection-acknowledgement packet to the second computer system;
- if the first communication packet is a connection-acknowledgement packet having no customization indicator, then:
- install an intercept rule;
- generate a second connection-acknowledgement packet having a customization indicator with the second value and addressed to the second computer system;
- and
- send the second connection-acknowledgement packet to the second computer system;
- and
- if the first communication packet is a connection-acknowledgement packet having a customization indicator with the second value, then:
- install a bypass rule.
18 more elements
Dependencies are inferred from the claim text.