Patent ID: 9319476
Filing Date: 2016-04-19
CPC Classification: H04L

Claim Text:
1. A method comprising: receiving, by an ingress of a transparent proxy device and from a first end device, a first request that includes a first initial sequence number and options, to establish a layer four connection with a second end device, wherein the ingress operates at a layer lower than an application layer of the transparent proxy device; learning, by the ingress of the transparent proxy device, the first initial sequence number of the first request; transmitting, by the ingress of the transparent proxy device, the first request, to an egress of the transparent proxy device, wherein the first request bypasses an application proxy of the transparent proxy device and wherein the application proxy operates at the application layer of the transparent proxy device; receiving, by an egress of the transparent proxy device and from the ingress, the first request, wherein the egress operates at the layer lower than the application layer of the transparent proxy device; learning, by the egress of the transparent proxy device, the first initial sequence number of the first request; receiving, by the egress of the transparent proxy device and from the second end device, a first acknowledgement for the first request and options, wherein the first acknowledgement includes a second initial sequence number; learning, by the egress of the transparent proxy device, the second initial sequence number; transmitting, by the egress of the transparent proxy device, the first acknowledgement, to the ingress of the transparent proxy device, wherein the first acknowledgement bypasses the application proxy of the transparent proxy device; learning, by the ingress of the transparent proxy device, the second initial sequence number; transmitting, by the ingress to the application proxy of the transparent proxy device, a second request, which includes the first initial sequence number and options negotiated between the first end device and the second end device, to establish a layer four connection between the ingress and the application proxy, in response to receiving the first acknowledgement; establishing a layer four connection between the ingress and the first end device based on a second acknowledgement from the first end device; establishing the layer four connection, between the ingress and the application proxy, in response to receiving the second acknowledgement; establishing a layer four connection between the application proxy and the egress; and establishing the layer four connection between the egress and the second end device based on the second acknowledgement.