Gateway device for terminating a large volume of VPN connections

A system of communicating through a virtual private network (VPN) tunnel between a first application (app) on a device and a VPN gateway, the system comprising:

• logic for transmitting an internally unique internet protocol (IP) address and an app federation cookie from a VPN gateway to the first app on the device after determining that the first app is in a federation of wrapped apps on the device, wherein the app federation cookie is shared with a second app in the federation of wrapped apps after determining that the second app is in the federation of wrapped apps on the device and the second app is assigned the same internally unique IP address;
• logic for transmitting a first range of ports from the VPN gateway to the first app, wherein the first app uses a port in the first port range as a source port for data transmission from the first app to the VPN gateway, wherein the first port range comprises a plurality of ports not included in a second port range transmitted to the second app;
• logic for receiving, at the VPN gateway, a data transmission from the first app;
• and
• logic for determining, at the VPN gateway, that the data transmission originated from the first app based on the source port.

A virtual private network (VPN) gateway comprising:

• an output interface configured to transmit an internally unique internet protocol (IP) address and an app federation cookie from the virtual private network (VPN) gateway to a first application (app) on a device app after determining that the first app is in a federation of wrapped apps on the device, wherein the app federation cookie is shared with a second app in the federation of wrapped apps and the second app is assigned the same internally unique IP address, wherein the output interface is further configured to transmit a first range of ports from the VPN gateway to the first app, wherein the first app uses a port in the first port range as a source port for data transmission from the first app to the VPN gateway, wherein the first port range comprises a plurality of ports not included in a second port range transmitted to the second app;
• an input interface, at the VPN gateway, configured to receive a data transmission from the first app;
• a mapping mechanism configured to associate the first port range with the first app;
• a VPN gateway processor configured to determine that the data transmission originated from the first app based on the source port.