Systems and methods for cookie proxy jar management across cores in a multi-core system

• US 8,484,287 B2
• Filed: 08/05/2010
• Issued: 07/09/2013
• Est. Priority Date: 08/05/2010
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Gavini, Anil Kumar, Choudhary, Akshat, Agarwal, Puneet
• Primary Examiner(s): Fan, Hua
• Application Number:
  US12/851,449
• Publication Number:
  US 20120036178A1
• Time in Patent Office: 1,069 Days
• Field of Search: 709/203
• US Class Current: 709/203
• CPC Class Codes: G06F 2209/5016 Session
• CPC Class Codes: G06F 9/5027 the resource being a machine, e.g. CPUs, Servers, Terminals
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data

Abstract

The present solution is directed towards systems and methods for managing cookies by a multi-core device. The device is intermediary to a client and one or more servers. A first core of a multi-core device receives a response from a server to a request of the client through a user session. The response comprises a cookie. The first core removes the cookie from the response and stores the cookie in a corresponding storage for the session. The first core forwards the response without the cookie to the client. A second core then receives via a session, a second request from the client. The second core determines the identification of the first core as owner of the session from the second request. The second core then communicates to the first core a third request for cookie information for the session.

Claims

1. A method for managing cookies by a multi-core device intermediary to a client and one or more servers, the method comprising:

(a) receiving, by a first core of a multi-core device intermediary to a client and one or more servers, via a session, a response from a server to a first request of the client, the response comprising a cookie;

(b) removing, by the first core, the cookie from the response;

(c) storing, by the first core, the cookie in a corresponding storage for the session;

(d) forwarding, by the first core, the response without the cookie to the client;

(e) receiving, by a second core of the multi-core device, via the session a second request from the client;

(f) determining, by the second core from the second request, identification of the first core as owner of the session; and

(g) communicating, by the second core to the first core, a third request for cookie information for the session.

2. The method of claim 1, wherein step (b) further comprising determining, by the first core, to remove the cookie in response to a policy for one of the session or content of the response.

3. The method of claim 1, wherein step (b) further comprises determining, by the first core, to remove the cookie responsive to identifying a predetermined URL in the response.

4. The method of claim 1, wherein step (e) further comprises receiving, by the second core, a session cookie from the client.

5. The method of claim 4, wherein step (f) further comprises determining, by the second core, the owner of the session from the session cookie.

6. The method of claim 5, wherein step (f) further comprises determining, by the second core, the owner of the session from a session identifier.

7. The method of claim 1, wherein step (g) further comprises communicating, by the second core to the first core, the third request for cookie information for the session based on a domain, path and protocol.

8. The method of claim 1, further comprising receiving, by the second core from the first core, cookie information for a domain, path and protocol.

9. The method of claim 1, further comprising inserting, by the second core, into the third request a second cookie based on the cookie information received from the first core.

10. The method of claim 9, forwarding, by the device to a server of the one or more servers, the third request having the second cookie.

11. A system for managing cookies by a multi-core device intermediary to a client and one or more servers, the system comprising:

a multi-core device intermediary to a client and one or more servers, each core of the multi-core device executing a packet engine;

a first core of the multi-core device receiving via a session a response from a server to a first request of the client, the response comprising a cookie;

a first packet engine of the first core removing the cookie from the response, storing the cookie in a corresponding storage for the session, and forwarding the response without the cookie to the client;

a second core of the multi-core device receiving via the session a second request from the client; and

a second packet engine of the second core determining from the second request, identification of the first core as owner of the session and communicating to the first core a third request for cookie information for the session.

12. The system of claim 11, wherein the first packet engine removes the cookie in response to a policy for one of the session or content of the response.

13. The system of claim 11, wherein the first packet engine determines to remove the cookie based on identifying a predetermined URL in the response.

14. The system of claim 11, wherein the second core receives a session cookie from the client.

15. The system of claim 14, wherein the second packet engine determines the owner of the session from the session cookie.

16. The system of claim 15, wherein the second packet engine determines the owner of the session from a session identifier.

17. The system of claim 11, wherein the second packet engine communicates to the first core, the third request for cookie information for the session based on a domain, path and protocol.

18. The system of claim 11, wherein the second packet engine receives from the first core cookie information for a domain, path and protocol.

19. The system of claim 11, wherein the second packet engine inserts into the third request a second cookie based on the cookie information received from the first core.

20. The system of claim 11, wherein the second packet engine forwards to a server of the one or more servers, the third request having the second cookie.