Patent ID: 9634957
Date: 2017-04-25
CPC Classifications: H04L

Claim:
1. A method executed by a server machine running at least one Hypertext Transfer Protocol (HTTP) proxy server application and an operating system, the server machine communicating with a client over one or more computer communications networks, the method comprising: establishing a transport layer connection with a client over one or more computer communications networks; receiving at least one message over the transport layer connection from the client; determining, by the at least one HTTP proxy server application, that server machine resources allocated to the transport layer connection should be reduced, at least in part by determining that any of the client and transport layer connection exhibit attack characteristics; in response to the determination, the at least one HTTP proxy server application sending one or more communications to the operating system running on the server machine, indicating that the at least one HTTP proxy server application is releasing ownership of the transport layer connection, the one or more communications comprising a system call that includes a connection identifier for the transport layer connection; in response to the system call, the operating system transferring ownership of the transport layer connection to a surrogate program to serve as an endpoint for future messages over the transport layer connection; and, reducing server machine resources allocated to the transport layer connection, wherein said reduction comprises the at least one HTTP proxy server application performing a termination routine and releasing memory allocated to the transport layer connection.