Virtual desktop accelerator with support for dynamic proxy thread management

• US 9,313,297 B2
• Filed: 09/13/2013
• Issued: 04/12/2016
• Est. Priority Date: 05/03/2013
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Krishnamurthy, Santhosh, Hanumantharayappa, Raghunandan, Basha P.R., Khader
• Primary Examiner(s): Cox, Natisha
• Application Number:
  US14/026,242
• Publication Number:
  US 20140330891A1
• Time in Patent Office: 942 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/72 Signcrypting, i.e. digital signing and encrypting simultaneously
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

In particular embodiments, a method includes determining a data flow rate of the active connections at a proxy, comparing the data flow rate to a first pre-determined threshold value, and, when the data flow rate exceeds the first pre-determined threshold value, creating one or more new processing threads associated with the proxy.

Claims

1. A system comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to;

establish and maintain a second remote connection associated with a remote desktop protocol session between a client and a server using a second communication protocol that is different from a first communication protocol used by the server to establish a first remote connection with the client, wherein the second communication protocol supports a remote desktop session;

dynamically select a cryptographic context to use to encrypt a data packet of a data flow between the client and the server, wherein a first cryptographic context is used to encrypt or decrypt a first data packet of the data packet during a first point in time during the remote desktop protocol session and a second cryptographic context is used to encrypt or decrypt a second data packet of the data packet during a second point in time during the remote desktop protocol session;

determine one or more active remote connections, wherein the one or more active remote connections comprises the second remote connection;

determine a data flow rate of the one or more active remote connections at a proxy;

compare the data flow rate to a first pre-determined threshold value; and

when the data flow rate exceeds the first pre-determined threshold value, create one or more new processing threads associated with the proxy.

2. The system of claim 1, the processors being further operable when executing the instructions to:

when the data flow rate is less than or equal to a second pre-determined threshold value, kill one or more existing processing threads associated with the proxy.

3. The system of claim 1, wherein determining a data flow rate of the one or more active remote connections at the proxy comprises analyzing one or more socket buffers associated with the proxy.

4. The system of claim 3, wherein analyzing one or more socket buffers associated with the proxy comprises determining a number of bytes written to the socket buffers in a pre-determined period of time.

5. The system of claim 1, wherein a number of new processing threads created by the proxy is based at least in part on a load of a machine on which the proxy resides.

6. The system of claim 5, wherein a network gateway resides on the machine.

7. The system of claim 2, wherein the second pre-determined threshold value is equal to the first pre-determined threshold value.

8. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

establish and maintain a second remote connection associated with a remote desktop protocol session between a client and a server using a second communication protocol that is different from a first communication protocol used by the server to establish a first remote connection with the client, wherein the second communication protocol supports a remote desktop session;

dynamically select a cryptographic context to use to encrypt a data packet of a data flow between the client and the server, wherein a first cryptographic context is used to encrypt or decrypt a first data packet of the data packet during a first point in time during the remote desktop protocol session and a second cryptographic context is used to encrypt or decrypt a second data packet of the data packet during a second point in time during the remote desktop protocol session;

determine one or more active remote connections, wherein the one or more active remote connections comprises the second remote connection;

determine a data flow rate of the one or more active remote connections at a proxy;

compare the data flow rate to a first pre-determined threshold value; and

when the data flow rate exceeds the first pre-determined threshold value, create one or more new processing threads associated with the proxy.

9. The media of claim 8, the software being further operable when executed to:

when the data flow rate is less than or equal to a second pre-determined threshold value, kill one or more existing processing threads associated with the proxy.

10. The media of claim 8, wherein determining a data flow rate of the one or more active remote connections at the proxy comprises analyzing one or more socket buffers associated with the proxy.

11. The media of claim 10, wherein analyzing one or more socket buffers associated with the proxy comprises determining a number of bytes written to the socket buffers in a pre-determined period of time.

12. The media of claim 8, wherein a number of new processing threads created by the proxy is based at least in part on a load of a machine on which the proxy resides.

13. The media of claim 12, wherein a network gateway resides on the machine.

14. A method comprising:

establishing and maintaining a second remote connection associated with a remote desktop protocol session between a client and a server using a second communication protocol that is different from a first communication protocol used by the server to establish a first remote connection with the client, wherein the second communication protocol supports a remote desktop session;

dynamically selecting a cryptographic context to use to encrypt a data packet of a data flow between the client and the server, wherein a first cryptographic context is used to encrypt or decrypt a first data packet of the data packet during a first point in time during the remote desktop protocol session and a second cryptographic context is used to encrypt or decrypt a second data packet of the data packet during a second point in time during the remote desktop protocol session;

determining one or more active remote connections, wherein the one or more active remote connections comprises the second remote connection;

determining a data flow rate of the one or more active remote connections at a proxy;

comparing the data flow rate to a first pre-determined threshold value; and

when the data flow rate exceeds the first pre-determined threshold value, creating one or more new processing threads associated with the proxy.

15. The method of claim 14, further comprising:

when the data flow rate is less than or equal to a second pre-determined threshold value, killing one or more existing processing threads associated with the proxy.

16. The method of claim 14, wherein determining a data flow rate of the one or more active remote connections at the proxy comprises analyzing one or more socket buffers associated with the proxy.

17. The method of claim 16, wherein analyzing one or more socket buffers associated with the proxy comprises determining a number of bytes written to the socket buffers in a pre-determined period of time.

18. The method of claim 14, wherein a number of new processing threads created by the proxy is based at least in part on a load of a machine on which the proxy resides.

19. The method of claim 18, wherein a network gateway resides on the machine.

20. The method of claim 15, wherein the second pre-determined threshold value is equal to the first pre-determined threshold value.