Source: http://www.google.com/patents/US20060015570?ie=ISO-8859-1&dq=5572193
Timestamp: 2016-02-11 05:04:42
Document Index: 648692466

Matched Legal Cases: ['application No. 60', 'art 300', 'art 300', 'art 300', 'art 300', 'art 300', 'art 300', 'art 300']

Patent US20060015570 - Method and device for performing integrated caching in a data communication ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inPatentsA device that implements a method for performing integrated caching in a data communication network. The device is configured to receive a packet from a client over the data communication network, wherein the packet includes a request for an object. At the operating system/kernel level of the device,...http://www.google.com/patents/US20060015570?utm_source=gb-gplus-sharePatent US20060015570 - Method and device for performing integrated caching in a data communication networkAdvanced Patent SearchPublication numberUS20060015570 A1Publication typeApplicationApplication numberUS 11/169,002Publication dateJan 19, 2006Filing dateJun 29, 2005Priority dateJun 30, 2004Also published asCA2584288A1, CN101164057A, CN101164057B, EP1774439A2, EP1774439A4, US8108608, US8250301, US8739274, US20080140938, US20080222363, WO2006005078A2, WO2006005078A3Publication number11169002, 169002, US 2006/0015570 A1, US 2006/015570 A1, US 20060015570 A1, US 20060015570A1, US 2006015570 A1, US 2006015570A1, US-A1-20060015570, US-A1-2006015570, US2006/0015570A1, US2006/015570A1, US20060015570 A1, US20060015570A1, US2006015570 A1, US2006015570A1InventorsPrakash Khemani, Prabakar Sundarrajan, Lakshmi Kumar, Kailash Kailash, Ajay Soni, Rajiv Sinha, Saravanakumar AnnamalaisamiOriginal AssigneeNetscaler, Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (97), Referenced by (90), Classifications (11), Legal Events (3) External Links: USPTO, USPTO Assignment, EspacenetMethod and device for performing integrated caching in a data communication network
US 20060015570 A1Abstract
A device that implements a method for performing integrated caching in a data communication network. The device is configured to receive a packet from a client over the data communication network, wherein the packet includes a request for an object. At the operating system/kernel level of the device, one or more of decryption processing of the packet, authentication and/or authorization of the client, and decompression of the request occurs prior to and integrated with caching operations. The caching operations include determining if the object resides within a cache, serving the request from the cache in response to a determination that the object is stored within the cache, and sending the request to a server in response to a determination that the object is not stored within the cache. Images(5) Claims(24)
CROSS-REFERENCE TO RELATED APPLICATIONS [0001] This application is a non-provisional of and claims priority to provisional U.S. patent application No. 60/583,784, filed Jun. 30, 2004 and entitled “Method and Device for Performing Integrated Caching in a Data Communication Network”, the entirety of which is incorporated by reference herein.
BACKGROUND OF THE INVENTION [0002] 1. Field of the Invention [0003] The present invention relates generally to data communication networks. In particular, the present invention relates to a method and device for performing caching of data in a data communication network. [0004] 2. Background [0005] The growth rate of network traffic continues to accelerate, albeit not quite at the exponential rates of the late 1990's. This expanding pace puts strains on the infrastructure that carries that traffic. Various solutions have arisen to permit network operators to handle this increasing problem, including the development of caching technology. With caching, content may be reused and served to clients without burdening server infrastructure. Additionally, caches can permit content to be placed closer to the end user thereby improving response time while also reducing server infrastructure burden. [0006] Caching works by monitoring object requests made by one or more clients to a server on a network and saving the result of such request or requests in the storage of an appliance on the network. Subsequent requests for that same object are intercepted by the cache which delivers the object from its storage rather than passing the request on to the origin server. In this manner, caching provides the dual benefit of lowering response times and lowering the load on the server infrastructure. [0007] However, as the Internet has expanded, multiple modes of processing data have developed to provide various performance, security and other benefits to network traffic. These modes of processing, however, have limited the effectiveness and performance capabilities of caches. Caches traditionally are not able to handle or process the variety of forms that data can take in the ever more complex and processed network environments and therefore the function and usefulness of such caches are commensurately limited. [0008] Traditionally, caches have also been limited by virtue of being unable to serve to users that must be authenticated and/or authorized by the network prior to the delivery of content to such user. Authentication and authorization features have not been part of cache functionality. [0009] Additional limitations of caches have included the inability to process and cache Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS) traffic. Traditional caches have no way of decrypting, comprehending or processing encrypted traffic and therefore are unable to cache any HTTPS object or to provide end-to-end encryption for cached objects. [0010] Furthermore, the ability of the cache to work with other network services and technologies including load balancing technology and other types of acceleration and packet processing has been less then optimal. The problem arises because of processing duplications and other inefficiencies introduced by traditional modes of integration that typically require multiple memory copies and frequent context switching to effect the integration. [0011] The traditional approach to integrating a cache with other types of network processing usually involve placing multiple products in a line so that each function is carried out at a separate and independent node. This approach introduces considerable additional processing and a number of other inefficiencies as described below. Even if the technologies are combined within the same product, the combination is usually implemented in such a way that the benefits of caching when integrated with any other processing are diminished in the process of integration. The limitation of such integration arises as a result of the excess processing, copying and context switching involved in making these technologies work together. [0012] The excess copying and switching results from the fact that each request or object must first be copied into a new form in the processor memory space by the application. The copying into memory space is performed in order to enable the additional processing (such as encryption/decryption, compression, connection offload or any other type of processing) to be carried out. The request or object must then be copied back to the packet level prior to being processed by the cache itself. Each additional type of processing generally requires packet copying to processor buffers, processing by the application and then copying back out for service by the cache. This approach to process integration therefore introduces multiple additional memory copies putting additional and unnecessary burdens upon the network infrastructure. An embodiment of the present invention minimizes this switching of contexts and duplicative processing as will be described below. SUMMARY OF THE INVENTION [0013] In order to achieve maximum performance, a device in accordance with an embodiment of the present invention efficiently integrates caching with the processing of one or more of (1) Secure Sockets Layer (SSL) encryption/decryption; (2) compression; (3) packet processing; (4) load balancing; (5) Transmission Control Protocol (TCP) buffering; (6) Authentication, Authorization and Auditing (AAA), (7) defense against distributed denial of service attacks (8), defense against HTTP/S based attacks such as Nimda, Code-Red, MyDoom etc., (9) offload of network processing, and (10) other processing, such as techniques to protect networks from network based viruses or attacks. [0014] In particular, a device in accordance with an embodiment of the present invention integrates the foregoing technologies at the operating system (OS) or kernel level of the device rather than in the user/application level as a process or module. By integrating the cache features at this level of the computational structure and hierarchy, an embodiment of the present invention can much more efficiently synchronize caching processes with other processing of the connections to be carried out by or at the appliance including SSL decryption and end point processing, as well as the various others mentioned herein or otherwise carried out at the appliance. Such other processes can also include, in addition to each of the processes described above, connection processing, global server load balancing (GSLB), Hypertext Transfer Protocol (HTTP) compression, TCP compression, defenses against TCP and HTTP distributed denial of service attacks, HTTP virus defense scanning, and the like. [0015] By integrating the variety of network processing and the caching at the OS or kernel level, an embodiment of the invention greatly increases the efficiency of such integration. Working in the kernel space, an embodiment of the invention enables the cache to relate to a relevant object or request as a data structure where the cache maintains equal status to such data structure as each of the other applications. By carrying out tight integration in the kernel/OS space, the cache is also able to see the semantics/data structure of an HTTP or HTTPS request and to make more efficient caching decisions as a result of having access to such data structures. An embodiment of the present invention thereby avoids the problems of context switching and duplication associated with integrating in the more obvious, traditional approach of running a process in the user space. [0016] Further features and advantages of the invention, as well as the structure and operation of various embodiments of the invention, are described in detail below with reference to the accompanying drawings. It is noted that the invention is not limited to the specific embodiments described herein. Such embodiments are presented herein for illustrative purposes only. Additional embodiments will be apparent to persons skilled in the relevant art(s) based on the teachings contained herein. BRIEF DESCRIPTION OF THE DRAWINGS/FIGURES [0017] The accompanying drawings, which are incorporated herein and form part of the specification, illustrate the present invention and, together with the description, further serve to explain the principles of the invention and to enable a person skilled in the relevant art(s) to make and use the invention. [0018] FIG. 1 illustrates an example data communication network environment in which an embodiment of the present invention may be implemented. [0019] FIG. 2 illustrates an example software architecture of an appliance that performs integrated caching in accordance with an embodiment of the present invention. [0020] FIG. 3 illustrates a flowchart of a method for performing integrated caching in a device in accordance with an embodiment of the present invention. [0021] FIG. 4 illustrates an example computer system-based implementation for performing caching functions in accordance with embodiments of the present invention. [0022] The features and advantages of the present invention will become more apparent from the detailed description set forth below when taken in conjunction with the drawings, in which like reference characters identify corresponding elements throughout. In the drawings, like reference numbers generally indicate identical, functionally similar, and/or structurally similar elements. The drawing in which an element first appears is indicated by the leftmost digit(s) in the corresponding reference number.
DETAILED DESCRIPTION OF THE INVENTION [0000] A. Example Data Communication Network Environment [0023] FIG. 1 illustrates an example data communication network environment 100 in which an embodiment of the present invention may be implemented. As shown in FIG. 1, example data communication network environment 100 includes a plurality of clients 102 a-102 n, an appliance 104, and a plurality of servers 106 a-106 n. Each of clients 102 a-102 n are communicatively coupled to appliance 104 via a public data communication network 108, while appliance 104 is communicatively coupled to servers 106 a-106 n via a private data communication network 110. In an embodiment, public data communication network 108 comprises the Internet and private data communication network 110 comprises an enterprise network, although the invention is not so limited. [0024] In accordance with an embodiment of the present invention, appliance 104 includes cache management logic and also includes or has access to a storage medium which it utilizes to implement a cache. Using these features, appliance 104 monitors object requests made by clients 102 a-102 n to any of servers 106 a-106 n. Objects returned from servers 106 a-106 n in response to these object requests are stored in the cache by appliance 104. Subsequent requests for the same object from any of clients 102 a-102 n are intercepted by appliance 104, which attempts to deliver the object from the cache rather than passing the request on to servers 106 a-106 n. This provides the dual benefit of reducing both the time required respond to requests from clients 102 a-102 n and the load on the infrastructure supporting servers 106 a-106 n. [0025] As will be described in more detail herein, in an embodiment of the present invention, appliance 104 integrates this caching functionality at the operating system (OS)/kernel level of its software architecture with one or more other processing tasks, including but not limited to decryption, decompression, or authentication and/or authorization. [0026] Example network environment 100 is presented by way of example only and is not intended to be limiting. Based on the teachings provided herein, persons skilled in the relevant art(s) will readily appreciate that the present invention may be implemented in any network environment in which object requests and responses are transferred between network nodes. [0000] B. Integrated Caching in a Data Communication Network in Accordance with an Embodiment of the Present Invention [0027] FIG. 2 illustrates an example software architecture 200 of appliance 104. Software architecture 200 is provided by way of illustration only and is not intended to be limiting. As shown in FIG. 2, example software architecture 200 consists of a hardware layer 206 and a software layer divided into a user space 202 and a kernel space 204. [0028] Hardware layer 206 provides the structures upon which programs and services within kernel space 204 and user space 202 are executed. Hardware layer 206 also provides the structures which allow programs and services within kernel space 204 and user space 202 to communicate data both internally and externally with respect to appliance 104. As shown in FIG. 2, hardware layer 206 includes at least a central processing unit (CPU)_262 for executing software programs and services, a memory 264 for storing software and data, network ports 266 for transmitting and receiving data over a network, and an SSL processor 260 for performing functions related to Secure Sockets Layer processing of data transmitted and received over the network. [0029] The operating system of appliance 104 segregates the available system memory into kernel space 204 and user space 204. In example software architecture 200, the operating system is depicted as a Unix operating system although the invention is not so limited. Kernel space 204 is strictly reserved for running Unix kernel 230, device drivers and any kernel extensions. In accordance with an embodiment of the present invention, kernel space 204 also includes a number of network services or processes working in conjunction with an integrated cache 232, the benefits of which are described in detail elsewhere herein. [0030] As shown in FIG. 2, kernel space 204 includes at least a high-speed layer 2-7 integrated packet engine 240, an SSL engine 234, a policy engine 236 and multi-protocol compression logic 238. High speed layer 2-7 integrated packet engine 266 is responsible for managing the kernel-level processing of packets received and transmitted by appliance 104 via network ports 266. To this end, high speed layer 2-7 integrated packet engine 266 works in conjunction with SSL engine 234, integrated cache 232, policy engine 236 and multi-protocol compression logic 238. In particular, SSL engine is configured to perform SSL processing of packets, policy engine 236 is configured to perform functions related to traffic management such as request-level content switching and request-level cache redirection, and multi-protocol compression logic 238 is configured to perform functions related to compression and decompression of data. Integrated cache 232 is configured to perform an integrated caching function as described elsewhere herein. [0031] In contrast to kernel space 204, user space 202 is the memory area used by all user mode applications. A user mode application cannot access kernel space 204 directly and must use service calls in order to access kernel services. As shown in FIG. 2, user space 202 of appliance 104 includes at least a graphical user interface (GUI) 210, a command line interface (CLI) 212, shell services 214, health monitoring programs 216, and daemon services 218. GUI 210 and CLI 212 provide a means by which a system administrator can interact with and control the operation of appliance 104. Health monitoring programs 216 are used to ensure that network systems are functioning properly and that users are receiving requested content over a network. Daemon services 218 are programs that run continuously and handle periodic service requests received by appliance 104. Each daemon program forwards the requests to other programs (or processes) as appropriate. [0032] FIG. 3 illustrates a flowchart 300 of a sequence of events that may occur in an appliance that provides integrated caching functionality in accordance with an embodiment of the present invention. However, the invention is not limited to the description provided by the flowchart 300. Rather, it will be apparent to persons skilled in the relevant art(s) from the teachings provided herein that other functional flows are within the scope and spirit of the present invention. These other functional flows could involve different processing, different sequencing and other variations on the integration of caching that is the subject of the present invention. [0033] The method of flowchart 300 can be implemented in one or more device(s) that are communicatively coupled to a data communication network. For example, the method of flowchart 300 can be implemented in an appliance such as appliance 104 described above in reference to FIG. 1, having a software architecture 200 as described above in reference to FIG. 2. The method of flowchart 300 will be described with continued reference to this exemplary embodiment, although the invention is not so limited. [0034] As shown in FIG. 3, the method of flowchart 300 begins at step 302, in which appliance 104 receives an encrypted packet from one of clients 102 a-102 n. In an embodiment, appliance 104 is configured to act as a proxy SSL endpoint for servers 106 a-106 n, decrypting encrypted packets received from clients 102 a-102 n, and then sending them on for further processing as necessary and ultimately on to an appropriate resource based on address information within the encrypted packets. The appropriate resource may be, for example, any of servers 106 a-106 n or the cache managed by appliance 104. At step 304, appliance 104 performs decryption processing on the packet. [0035] At step 306, appliance 104, which is configured in accordance with an embodiment of the present invention to carry out AAA policies for access control, authenticates and/or authorizes the client from which the encrypted packet was received. [0036] At step 308, appliance 104, which is configured in accordance with an embodiment of the present invention to perform certain types of packet processing, carries out packet processing on the decrypted packets to reduce the connection overhead processing requirements generated by the applicable network protocols. [0037] At step 310, appliance 104, which is configured in accordance with an embodiment of the present invention to compress and decompress content, decompresses a request associated with the packet. In an embodiment, the request comprises a web object request, although the invention is not so limited. [0038] At step 312, appliance 104 is then able to activate the cache functionality, which receives a clear and/or authorized and/or decompressed and/or packet-processed request for an object. Because of the prior processing described in reference to steps 302, 304, 306, 308 and 310, the cache management logic can make a decision as to whether the object has been cached or is cacheable based on a clear/authorized/decompressed/packet processed request and is therefore able to process a much wider array of requests then traditional caches and to carry out the caching more efficiently than under traditional approaches. Furthermore, because the cache management logic is working in the kernel space along with the other processes, it relates to the relevant object as a data structure with equal status in relation to such data structure as each of the other applications and therefore the integration is carried out in an extremely efficient manner. [0039] As shown at step 314, if the object is not already in the cache memory, appliance 104 sends a request on to one or more of servers 106 a-106 n. Before the request is sent, however, several additional processing steps may occur. For example, at step 116, appliance 104 optionally performs connection processing to ensure efficient transit of the request to the server(s) and at step 118, appliance 104 optionally makes a load balancing decision to ensure that the request is sent to the most appropriate server(s). Also, in an embodiment, the request is encrypted before it is sent to the server(s) via a back-end encryption process, thereby providing end-to-end network security. At step 320, the request is transmitted to the server(s) [0040] At step 322, appliance 104 receives a response back from one of servers 106 a-106 n. If back-end encryption is supported as discussed above, appliance 104 decrypts the response from the server. [0041] At step 324, appliance 104 compresses an object associated with the response from the server. In an embodiment, the object comprises a web object, although the invention is not so limited. [0042] At step 326, the cache management logic in appliance 104 stores the object in the cache in compressed form. The cache management logic is able to store compressed objects in this fashion due to the processing abilities of the present invention. Once the object is stored in the cache, future client requests for the object can be served from the cache without performance of steps 316, 318, 320, 322, 324 and 326 as described above. This is indicated by the line directly connecting decision step 314 to step 328 in flowchart 300. [0043] At step 328, after the object has been received from a server or retrieved from the cache, appliance 104 performs packet processing on the connection to more efficiently service the original client request. At step 330, the response object is then re-encrypted and delivered back to the client. [0044] Each of the processing steps described above occurs at the kernel/OS level of appliance 104. By implementing the cache in the middle of, and integrated with, other processing steps in the kernel/OS space, an embodiment of the present invention is able to bring out additional functionality and improve performance of the cache. [0045] Such integration permits a cache implementation in accordance with an embodiment of the invention to perform additional functions that are traditionally beyond the functional abilities of a cache. For example, an embodiment of the present invention permits the cache to work with encrypted and/or compressed objects. [0046] Another example of additional functionality that may be achieved by an embodiment of the present invention involves the caching of end-to-end encrypted HTTPS traffic. Typically, caches only store unencrypted HTTP responses from servers. Certain caches may in some cases support SSL encrypted HTTPS delivery from the cache to the clients but, in any case, traditional caches are not able to cache responses that have been encrypted by the server and so are unable to support end-to-end (i.e. server to client) encryption. Typically, when a response is encrypted by the server in the form of HTTPS, the cache is not able to decrypt such a response and is therefore unable to store the response in its cache memory. For this reason, traditional caches fail to provide any benefit in the face of end-to-end encrypted traffic. In an embodiment of the present invention, the integrated caching appliance serves as a two-way termination point for the SSL encrypted HTTPS traffic. [0047] For example, in a embodiment of the present invention, the integrated caching appliance acts as a termination point both to encrypted traffic between the server and the appliance, and between the appliance and the clients. In this manner, the appliance is able to decrypt and cache HTTPS-encrypted responses received from servers and when serving such responses to a client, re-encrypt such response and securely deliver it to the requesting client, thereby enabling end-to-end encryption and thus increasing the applicability of caching to a wider variety of web traffic. [0048] In an embodiment of the present invention, the appliance can also serve as an endpoint in an SSL virtual private network (SSL VPN). In particular, the appliance can act as a proxy SSL endpoint for any resource in a private data communication network, decrypting encrypted packets received from a client and then sending them on to the appropriate destination server resource based on address information within the encrypted packets. As described in commonly-owned co-pending U.S. patent application Ser. No. 11/039,946 entitled “System and Method for Establishing a Virtual Private Network,” filed on Jan. 24, 2005, the entirety of which is incorporated by reference herein, a data communication session established between client and a gateway may be encrypted with the gateway serving as an encryption endpoint as described in the preceding paragraphs of the present application. [0049] As described in the referenced application, the client may use Secure Sockets Layer (SSL), IPSec, or some other encryption method to establish the encrypted data communication session by which an interception mechanism on the client directs traffic to the gateway while making the client browser think it is communicating directly with the destination servers or destination networks. In such an embodiment, the encrypted data communication session can be terminated at the gateway, which also includes an integrated cache as described herein. In this way caching functionality can be integrated into the SSL VPN functionality. [0050] The gateway can also perform any applicable AAA policies to the request and consequently, the gateway will serve cached objects only to appropriately authenticated clients, as well as permitting requests only for users authorized to access a particular cached object. This is possible because the cache is integrated in such a way that the access control policies of the gateway are enforced before the cache sees any particular request. Thus, cached objects get the benefit of access control without the cache itself needing to perform the authentication and authorization. [0051] Through the integration of the cache with such other functions, the cache itself becomes more efficient and more effective at handling the variety of data that passes across today's networks. An embodiment of the present invention also is able to improve the efficiency of the overall network performance by introducing the benefits of cache functionality to a broader array of web traffic. [0052] Some other unique results of the mode of integration described above in accordance with an embodiment of the present invention are as follows. One result is the ability to cache pre-compressed data and serve it to compression-aware clients. Another result is the ability to cache access-controlled data. Yet another result is the ability to work with external caches to provide scalability of the cache. Because the cache is integrated with redirection and traffic management capabilities at the gateway, external caches can be deployed to provide a second-tier of caching thereby extending the capacity (and the benefits) of caching significantly. Through an embodiment of the present invention, this capacity is created without the cache module itself having to explicitly perform cache redirection policies. [0053] In terms of performance, by integrating the cache as described above, the processors of the cache are freed from performing the variety of connection processing tasks that caches, acting as a nodes on a network, are traditionally required to perform, and are thus able to perform its caching functions at their highest performance levels. Indeed, by enabling the caching of compressed data, the cache is able to function even more efficiently and allow users to realize even higher performance. [0054] As previously noted in this application, the efficiency arises as a result of the way the cache is integrated with the other network services and technologies including load balancing technology, encryption, AAA, compression and other types of acceleration and packet processing. As a result, processing duplications and other inefficiencies introduced by traditional modes of integration are avoided. These inefficiencies, caused by unnecessary copying and context switching, arise because each object received by the device must be copied to a message and then into a processor memory prior to processing by the relevant application. The request must then be copied back to the object or packet level for processing by the cache introducing additional memory copies. In contrast, an embodiment of the present invention carries out the integration at the OS or kernel level, thereby enabling the cache to operate on the object as a data structure where the cache has equal status as the other applications and/or processes in relating to and processing such data structure and where the need for such additional memory copies is obviated as all processes are working with the same data structures. The result is a more efficient integration. [0000] C. Caching with Proactive Validation in a Data Communication Network in Accordance with an Embodiment of the Present Invention [0055] Because web objects can change over time, each potentially cacheable object is said to have a useful life, or “freshness”. The concept of freshness refers to the fact that the application server that originally generated the content also determines the period of time that such object can be served by a cache that may store such object. Caches must be able to determine whether or not the copy of an object stored in its memory is still “fresh,” or whether the cache needs to retrieve a new copy of the object from the origin server. An embodiment of the present invention implements a novel approach to assuring object freshness. [0056] Many conventional cache implementations try to keep the cached content fresh by fetching the content from the origin on a pre-determined schedule. The fetching of content from the origin occurs at times established by the cache administrator typically based on one or both of the following approaches: either at (i) regular specified intervals or (ii) when the content is about to expire. [0057] There are two problems typically associated with the above commonly-employed approaches. First, unnecessary processing loads are imposed upon the origin server because that server is required to provide content to the cache requesting the refreshment (whether such refresh occurs at specified intervals or as the content is about to expire) without regard to whether such content will ultimately be served to clients. Second the cache incurs additional processor load based on the extra processing overhead generated because the cache needs to keep track of the elements that must be refreshed and the time at which they have to be refreshed. [0058] A cache in accordance with an embodiment of the present invention solves the above problems using a novel pre-fetching approach. The pre-fetching of the content is not performed in accordance with a predefined schedule or just prior to expiration of the content. Instead, an embodiment of the present invention performs pre-fetching only when both of the following conditions have been met: (1) a client has made a request for the specified content and (2) that content is ‘about to expire’. [0059] This approach addresses both problems described above. Pro-active revalidation is more likely to generate a request for refreshing of content from the origin server only where such content is being actively accessed. This minimizes the amount of ‘unnecessary’ load on the origin server. As discussed above, where the cache requests refreshment of objects that are not ultimately served to clients (or only rarely get served depending on the sensitivity of the cache), the cache is inefficiently utilizing both its own resources as well as the resources of the origin server. An embodiment of the present invention avoids the inefficient use of the cache and server resources by requesting only that content that is being actively accessed. The approach also, for the same reason, reduces the bandwidth used for pre-fetching and therefore makes more efficient use of network resources than traditional approaches. [0060] Furthermore, an embodiment of the present invention uses the expiry information included in the cached object itself to determine whether to request refreshment of the object from the origin server. Such expiry information is typically included in the headers of the relevant object. This embodiment thus avoids the inefficiencies of storing any additional information for fetching unlike many traditional approaches which require the cache to keep a table tracking the schedule for refreshment. [0061] Using a ‘demand-based’ pre-fetching technique also enhances benefits that are inherent to pre-fetching. This technique reduces the number of cache misses for frequently accessed objects since such objects are very likely to undergo pro-active revalidation, just before they expire. This technique can also prevent the surge of traffic to an origin server that can occur when a large response that is in great demand expires. In the traditional approach, all of the requests for such content miss the cache and get sent to the origin server because the cache content has expired. By contrast, in an embodiment of the present invention, the content of the cache memory will generally be refreshed just prior to expiration and therefore the situation where cache misses occur while the cache is refreshing are much less likely to arise. [0062] In an embodiment of the present invention, the aggressiveness of pre-fetching can be controlled through adjusting the length of the duration before the expiry where the content is determined to be about to expire and also the number of client requests required to trigger refreshment by the cache of the relevant object. [0000] D. Optimizing Processing of Large Non-Cacheable Responses Using “Negative Cells” in Accordance with an Embodiment of the Present Invention [0063] In accordance with an embodiment of the present invention, the cache recognizes and does not store objects that are above a specified size in order to improve the object hit ratio. Caches typically have limited memory space devoted to storing cached objects and therefore certain responses that exceed allocated memory space are ultimately rejected as non-cacheable and not stored by the cache. With traditional caches, the cache attempts to store the large response in its cache memory and only aborts storing the response once the cache recognizes that the response size exceeds a predefined maximum size. Traditional caches will repeatedly attempt to cache the large response each time a request for such response is received by the cache from the server. In each case, the cache will need to determine that the object is non-cacheable as exceeding the memory space. Thus, this is a manifestly inefficient approach. [0064] In accordance with an embodiment of the present invention, the cache employs an optimization to avoid expending effort in storing such responses. Whenever the cache detects a response that becomes non-cacheable due to response size, it stores a notation regarding the corresponding request in a data structure termed a “negative cell.” The notation indicates that the request is non-cacheable. In the future, when a client requests the same object, the request is matched to the notation regarded the first request stored in the data structure. Based on the match, the cache will not try to cache the response and instead the request will completely bypass the cache. [0065] There is no user configuration required for specifying the duration for which a negative cell should remain in the cache. In fact, the users are not even aware that this particular mechanism is being employed. In an embodiment, the cache uses the regular expiry information that it would have employed to cache the big response, to cache the “negative information” about that response. [0000] E. Exemplary Computer System-Based Implementation [0066] The functions of the present invention may be implemented using hardware, software, or a combination thereof and may be implemented in one or more computer systems or other processing systems. For example, FIG. 4 depicts an example computer system 400 that may be utilized to implement a the functions of the present invention. [0067] As shown in FIG. 4, the example computer system 400 includes a processor 404 for executing software routines in accordance with embodiments of the present invention. Although a single processor is shown for the sake of clarity, the computer system 400 may also comprise a multi-processor system. The processor 404 is connected to a communication infrastructure 406 for communication with other components of the computer system 400. The communication infrastructure 406 may comprise, for example, a communications bus, cross-bar, or network. [0068] Computer system 400 further includes a main memory 408, such as a random access memory (RAM), and a secondary memory 410. The secondary memory 410 may include, for example, a hard disk drive 412 and/or a removable storage drive 414, which may comprise a floppy disk drive, a magnetic tape drive, an optical disk drive, or the like. The removable storage drive 414 reads from and/or writes to a removable storage unit 418 in a well known manner. Removable storage unit 418 may comprise a floppy disk, magnetic tape, optical disk, or the like, which is read by and written to by removable storage drive 414. As will be appreciated by persons skilled in the relevant art(s), the removable storage unit 418 includes a computer usable storage medium having stored therein computer software and/or data. [0069] In alternative embodiments, secondary memory 410 may include other similar means for allowing computer programs or other instructions to be loaded into computer system 400. Such means can include, for example, a removable storage unit 422 and an interface 420. Examples of a removable storage unit 422 and interface 420 include a program cartridge and cartridge interface (such as that found in video game console devices), a removable memory chip (such as an EPROM, or PROM) and associated socket, and other removable storage units 422 and interfaces 420 which allow software and data to be transferred from the removable storage unit 422 to computer system 400. [0070] Computer system 400 further includes a display interface 402 that forwards graphics, text, and other data from the communication infrastructure 406 or from a frame buffer (not shown) for display to a user on a display unit 430. [0071] Computer system 400 also includes at least one communication interface 424. Communication interface 424 allows software and data to be transferred between computer system 400 and external devices via a communication path 426. In embodiments of the present invention, the communication interface 424 permits data to be transferred between the computer system 400 and a data communication network, such as a public data or private data communication network. Examples of communications interface 424 can include a modem, a network interface (such as Ethernet card), a communications port, and the like. Software and data transferred via communications interface 424 are in the form of signals which can be electronic, electromagnetic, optical or other signals capable of being received by communications interface 424. These signals are provided to the communications interface via the communication path 426. [0072] As used herein, the term “computer program product” may refer, in part, to removable storage unit 418, removable storage unit 422, a hard disk installed in hard disk drive 412, or a carrier wave carrying software over a communication path 426 (wireless link or cable) to communication interface 424. A computer useable medium can include magnetic media, optical media, or other recordable media, or media that transmits a carrier wave or other signal. These computer program products are means for providing software to computer system 400. [0073] Computer programs (also called computer control logic) are stored in main memory 408 and/or secondary memory 410. Computer programs can also be received via communications interface 424. Such computer programs, when executed, enable the computer system 400 to perform one or more features of the present invention as discussed herein. In particular, the computer programs, when executed, enable the processor 404 to perform features of the present invention. Accordingly, such computer programs represent controllers of the computer system 400. [0074] The present invention can be implemented as control logic in software, firmware, hardware or any combination thereof. In an embodiment where the invention is implemented using software, the software may be stored in a computer program product and loaded into computer system 400 using removable storage drive 414, hard disk drive 412, or interface 420. Alternatively, the computer program product may be downloaded to computer system 400 over communications path 426. The software, when executed by the processor 404, causes the processor 404 to perform functions of the invention as described herein. [0000] G. Conclusion [0075] While various embodiments of the present invention have been described above, it should be understood that they have been presented by way of example only, and not limitation. Thus, it will be understood by those skilled in the relevant art(s) that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. Accordingly, the breadth and scope of the present invention should not be limited by any of the above-described exemplary embodiments, but should be defined only in accordance with the following claims and their equivalents. Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5708656 *Sep 11, 1996Jan 13, 1998Nokia Mobile Phones LimitedMethod and apparatus for packet data transmissionUS5864837 *Jun 12, 1996Jan 26, 1999Unisys CorporationMethods and apparatus for efficient caching in a distributed environmentUS6021470 *Mar 17, 1997Feb 1, 2000Oracle CorporationMethod and apparatus for selective data caching implemented with noncacheable and cacheable data for improved cache performance in a computer networking systemUS6023724 *Sep 26, 1997Feb 8, 20003Com CorporationApparatus and methods for use therein for an ISDN LAN modem that displays fault information to local hosts through interception of host DNS request messagesUS6026379 *Jun 17, 1996Feb 15, 2000Verifone, Inc.System, method and article of manufacture for managing transactions in a high availability systemUS6026413 *Aug 1, 1997Feb 15, 2000International Business Machines CorporationDetermining how changes to underlying data affect cached objectsUS6026440 *Jan 27, 1997Feb 15, 2000International Business Machines CorporationWeb server account manager plug-in for monitoring resourcesUS6029175 *Jun 7, 1996Feb 22, 2000Teknowledge CorporationAutomatic retrieval of changed files by a network software agentUS6170017 *May 8, 1997Jan 2, 2001International Business Machines CorporationMethod and system coordinating actions among a group of serversUS6173325 *Jul 31, 1998Jan 9, 2001Microsoft CorporationMethod computer program product, and system for assessing the performance of a packet scheduleUS6175869 *Apr 8, 1998Jan 16, 2001Lucent Technologies Inc.Client-side techniques for web server allocationUS6178409 *Jun 17, 1996Jan 23, 2001Verifone, Inc.System, method and article of manufacture for multiple-entry point virtual point of sale architectureUS6182139 *Jun 23, 1998Jan 30, 2001Resonate Inc.Client-side resource-based load-balancing with delayed-resource-binding using TCP state migration to WWW server farmUS6192408 *Sep 26, 1997Feb 20, 2001Emc CorporationNetwork file server sharing local caches of file access information in data processors assigned to respective file systemsUS6334664 *Dec 11, 1999Jan 1, 2002Silverbrook Research Pty LtdCapping a printhead against a transfer rollerUS6339832 *Aug 31, 1999Jan 15, 2002Accenture LlpException response table in environment services patternsUS6345239 *Aug 31, 1999Feb 5, 2002Accenture LlpRemote demonstration of business capabilities in an e-commerce environmentUS6507891 *Jul 22, 1999Jan 14, 2003International Business Machines CorporationMethod and apparatus for managing internal caches and external caches in a data processing systemUS6519571 *May 27, 1999Feb 11, 2003Accenture LlpDynamic customer profile managementUS6523027 *Jul 30, 1999Feb 18, 2003Accenture LlpInterfacing servers in a Java based e-commerce architectureUS6678734 *Nov 13, 1999Jan 13, 2004Ssh Communications Security Ltd.Method for intercepting network packets in a computing deviceUS6681029 *Jul 6, 2000Jan 20, 2004Digimarc CorporationDecoding steganographic messages embedded in media signalsUS6687732 *Aug 5, 1999Feb 3, 2004Inktomi CorporationAdaptive traffic bypassing in an intercepting network driverUS6691227 *Sep 8, 2000Feb 10, 2004Reefedge, Inc.Location-independent packet routing and secure access in a short-range wireless networking environmentUS6697824 *Aug 31, 1999Feb 24, 2004Accenture LlpRelationship management in an E-commerce application frameworkUS6697844 *Jun 5, 2000Feb 24, 2004Lucent Technologies, Inc.Internet browsing using cache-based compactionUS6697849 *May 1, 2000Feb 24, 2004Sun Microsystems, Inc.System and method for caching JavaServer Pages™ responsesUS6732237 *Aug 29, 2000May 4, 2004Oracle International CorporationMulti-tier caching systemUS6842906 *Aug 31, 1999Jan 11, 2005Accenture LlpSystem and method for a refreshable proxy pool in a communication services patterns environmentUS6847892 *Oct 29, 2001Jan 25, 2005Digital Angel CorporationSystem for localizing and sensing objects and providing alertsUS6850252 *Oct 5, 2000Feb 1, 2005Steven M. HoffbergIntelligent electronic appliance system and methodUS6850525 *Jan 4, 2002Feb 1, 2005Level 3 Communications, Inc.Voice over internet protocol (VoIP) network performance monitorUS6990070 *Dec 17, 1999Jan 24, 2006Nortel Networks LimitedMethod and apparatus for adjusting packet transmission volume from a sourceUS6990480 *Jan 31, 2003Jan 24, 2006Trancept LimitedInformation manager method and systemUS6996628 *Apr 11, 2001Feb 7, 2006Corente, Inc.Methods and systems for managing virtual addresses for virtual networksUS6996631 *Aug 17, 2000Feb 7, 2006International Business Machines CorporationSystem having a single IP address associated with communication protocol stacks in a cluster of processing systemsUS7000012 *Apr 23, 2001Feb 14, 2006Microsoft CorporationSystems and methods for uniquely identifying networks by correlating each network name with the application programming interfaces of transport protocols supported by the networkUS7007092 *Oct 5, 2001Feb 28, 2006Juniper Networks, Inc.Connection management system and methodUS7007103 *Apr 30, 2002Feb 28, 2006Microsoft CorporationMethod to offload a network stackUS7159014 *Dec 3, 2001Jan 2, 2007Fineground NetworksMethod and system for efficient and automated version management of embedded objects in web documentsUS7159777 *Apr 2, 2004Jan 9, 2007Silverbrook Research Pty LtdTransparent conveyor for check-out scanningUS7162540 *May 15, 2001Jan 9, 2007Catchfire Systems, Inc.Method and system for prioritizing network servicesUS7164680 *Jun 4, 2001Jan 16, 2007Koninklijke Philips Electronics N.V.Scheme for supporting real-time packetization and retransmission in rate-based streaming applicationsUS7165041 *May 27, 1999Jan 16, 2007Accenture, LlpWeb-based architecture sales toolUS7167844 *Dec 22, 1999Jan 23, 2007Accenture LlpElectronic menu document creator in a virtual financial environmentUS7171379 *Mar 23, 2001Jan 30, 2007Restaurant Services, Inc.System, method and computer program product for normalizing data in a supply chain management frameworkUS7175089 *Apr 2, 2004Feb 13, 2007Silverbrook Research Pty LtdFace determinationUS7178106 *Aug 21, 2001Feb 13, 2007Sonic Solutions, A California CorporationPresentation of media content from multiple media sourcesUS7318100 *Aug 12, 2003Jan 8, 2008Riverbed Technology, Inc.Cooperative proxy auto-discovery and connection interceptionUS7321906 *Jul 23, 2004Jan 22, 2008Omx Technology AbMethod of improving replica server performance and a replica server systemUS7480312 *Aug 19, 2003Jan 20, 2009Tehuti Networks Ltd.Network traffic accelerator system and methodUS7644188 *Feb 25, 2002Jan 5, 2010Intel CorporationDistributing tasks in data communicationsUS8351327 *Aug 28, 2006Jan 8, 2013Juniper Networks, Inc.Intermediate network device applying application-layer quality of service to channels within a communication sessionUS20020004834 *May 15, 2001Jan 10, 2002International Business Machines CorporationInterception method and system for compensating disadvantageous characteristics of a communication protocolUS20020004902 *Jun 21, 2001Jan 10, 2002Eng-Whatt TohSecure and reliable document deliveryUS20020007402 *Jan 17, 2001Jan 17, 2002Thomas Huston Arthur CharlesApproach for managing and providing content to usersUS20020016827 *Jun 2, 2001Feb 7, 2002Mccabe RonFlexible remote data mirroringUS20020023210 *Mar 22, 2001Feb 21, 2002Mark TuomenoksaMethod and system for managing and configuring virtual private networksUS20020026478 *Mar 14, 2001Feb 28, 2002Rodgers Edward B.Method and apparatus for forming linked multi-user groups of shared software applicationsUS20020026531 *Apr 11, 2001Feb 28, 2002John KeaneMethods and systems for enabling communication between a processor and a network operations centerUS20030009538 *Nov 6, 2001Jan 9, 2003Shah Lacky VasantNetwork caching system for streamed applicationsUS20030014623 *Jul 6, 2001Jan 16, 2003Michael FreedSecure sockets layer cut through architectureUS20030014624 *Feb 26, 2002Jan 16, 2003Andes Networks, Inc.Non-proxy internet communicationUS20030014625 *Jul 6, 2001Jan 16, 2003Michael FreedBufferless secure sockets layer architectureUS20030014628 *Jul 6, 2001Jan 16, 2003Michael FreedSecure sockets layer proxy architectureUS20030014650 *Jul 6, 2001Jan 16, 2003Michael FreedLoad balancing secure sockets layer acceleratorUS20030018891 *Jun 7, 2002Jan 23, 2003Rick HallEncrypted packet inspectionUS20030023767 *Jul 26, 2001Jan 30, 2003Brabson Roy FrankMethods, systems and computer program products for kernel based transaction processingUS20030033520 *Apr 29, 2002Feb 13, 2003Christopher PeifferHTTP multiplexor/demultiplexor system for use in secure transactionsUS20030037108 *Aug 16, 2002Feb 20, 2003Christopher PeifferSystem and method for maintaining statefulness during client-server interactionsUS20030039354 *Aug 27, 2001Feb 27, 2003Kimble David E.FIFO architecture with in-place cryptographic serviceUS20040003137 *Jun 26, 2002Jan 1, 2004Callender Robin L.Process-mode independent driver modelUS20040006708 *Jul 2, 2002Jan 8, 2004Lucent Technologies Inc.Method and apparatus for enabling peer-to-peer virtual private network (P2P-VPN) services in VPN-enabled networkUS20040008693 *Mar 25, 2003Jan 15, 2004Grove Adam J.System for fast recovery from losses for reliable data communication protocolsUS20040010601 *Jul 9, 2002Jan 15, 2004Afergan Michael M.Method and system for protecting web sites from public internet threatsUS20040010604 *Jul 15, 2002Jan 15, 2004Kiko TanakaInformation communicating system, information transmitting apparatus and information transmitting methodUS20040031058 *May 8, 2003Feb 12, 2004Richard ReismanMethod and apparatus for browsing using alternative linkbasesUS20040034744 *Aug 13, 2002Feb 19, 2004Magnus KarlssonDelay cache method and apparatusUS20040034794 *Aug 21, 2003Feb 19, 2004Yaron MayerSystem and method for comprehensive general generic protection for computers against malicious programs that may steal information and/or cause damagesUS20040039827 *Apr 8, 2003Feb 26, 2004Neoteris, Inc.Method and system for providing secure access to private networks with client redirectionUS20050005014 *Jul 1, 2003Jan 6, 2005John HolmesTransport system for instant messagingUS20050005107 *May 3, 2004Jan 6, 2005Shlomo TouboulMethod and system for caching at secure gatewaysUS20050013280 *Jul 14, 2003Jan 20, 2005Buddhikot Milind M.Method and system for mobility across heterogeneous address spacesUS20050021762 *May 11, 2004Jan 27, 2005Microsoft CorporationMethod of operation of an intelligent transpartent gateway during an FTP sessionUS20050022011 *Jun 6, 2003Jan 27, 2005Microsoft CorporationMulti-layer based method for implementing network firewallsUS20050022012 *Sep 30, 2002Jan 27, 2005Derek BluestoneClient-side network access polices and management applicationsUS20050022031 *May 28, 2004Jan 27, 2005Microsoft CorporationAdvanced URL and IP featuresUS20050025150 *Aug 1, 2003Feb 3, 2005Itworx EgyptAccelerating network performance by striping and parallelization of TCP connectionsUS20050027788 *Jun 17, 2004Feb 3, 2005Koopmans Christopher RaymondMethod and system for dynamic interleavingUS20050031058 *Jul 9, 2004Feb 10, 2005Soong Anthony C.K.Method and apparatus for automatic gain control of a wireless receiverUS20050044350 *Aug 19, 2004Feb 24, 2005Eric WhiteSystem and method for providing a secure connection between networked computersUS20060005240 *Jan 24, 2005Jan 5, 2006Prabakar SundarrajanSystem and method for establishing a virtual private networkUS20060018332 *Jul 21, 2004Jan 26, 2006Nokia CorporationSystem and method for increasing data throughout using a block acknowledgementUS20060031547 *May 7, 2004Feb 9, 2006Wyse Technology Inc.System and method for integrated on-demand delivery of operating system and applicationsUS20060034283 *Aug 13, 2004Feb 16, 2006Ko Michael AMethod and system for providing direct data placement supportUS20060041635 *May 28, 2004Feb 23, 2006Microsoft CorporationFlexible teleport architectureUS20070008883 *Jul 7, 2004Jan 11, 2007Nec CorporationTransport layer relay method, transport layer relay device, and program* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS7748032Sep 30, 2004Jun 29, 2010Citrix Systems, Inc.Method and apparatus for associating tickets in a ticket hierarchyUS7808906Jul 22, 2005Oct 5, 2010Citrix Systems, Inc.Systems and methods for communicating a lossy protocol via a lossless protocol using false acknowledgementsUS7810089Dec 30, 2005Oct 5, 2010Citrix Systems, Inc.Systems and methods for automatic installation and execution of a client-side acceleration programUS7849269Dec 30, 2005Dec 7, 2010Citrix Systems, Inc.System and method for performing entity tag and cache control of a dynamically generated object not identified as cacheable in a networkUS7849270Jul 16, 2010Dec 7, 2010Citrix Systems, Inc.System and method for performing entity tag and cache control of a dynamically generated object not identified as cacheable in a networkUS7865603Oct 1, 2004Jan 4, 2011Citrix Systems, Inc.Method and apparatus for assigning access control levels in providing access to networked content filesUS7921184 *Dec 30, 2005Apr 5, 2011Citrix Systems, Inc.System and method for performing flash crowd caching of dynamically generated objects in a data communication networkUS7978617Sep 15, 2006Jul 12, 2011Citrix Systems, Inc.Methods for providing performance improvement recommendationsUS8014421Sep 15, 2009Sep 6, 2011Citrix Systems, Inc.Systems and methods for adjusting the maximum transmission unit by an intermediary deviceUS8037126Mar 12, 2007Oct 11, 2011Citrix Systems, Inc.Systems and methods of dynamically checking freshness of cached objects based on link statusUS8065423Mar 1, 2006Nov 22, 2011Citrix Systems, Inc.Method and system for assigning access control levels in providing access to networked content filesUS8078972Sep 15, 2006Dec 13, 2011Citrix Systems, Inc.Methods and interfaces for displaying performance data related to a current remote access sessionUS8103783Mar 12, 2007Jan 24, 2012Citrix Systems, Inc.Systems and methods of providing security and reliability to proxy cachesUS8194275Dec 22, 2011Jun 5, 2012Xerox CorporationApparatus for low cost embedded platform for device-side, distributed services enablementUS8255456Dec 30, 2005Aug 28, 2012Citrix Systems, Inc.System and method for performing flash caching of dynamically generated objects in a data communication networkUS8260926Nov 25, 2008Sep 4, 2012Citrix Systems, Inc.Systems and methods for GSLB site persistenceUS8261057Jun 4, 2010Sep 4, 2012Citrix Systems, Inc.System and method for establishing a virtual private networkUS8275829Jul 21, 2009Sep 25, 2012Citrix Systems, Inc.Systems and methods of prefetching objects for caching using QoSUS8286230May 19, 2010Oct 9, 2012Citrix Systems, Inc.Method and apparatus for associating tickets in a ticket hierarchyUS8291119Jul 22, 2005Oct 16, 2012Citrix Systems, Inc.Method and systems for securing remote access to private networksUS8301839Dec 30, 2005Oct 30, 2012Citrix Systems, Inc.System and method for performing granular invalidation of cached dynamically generated objects in a data communication networkUS8312261Aug 12, 2011Nov 13, 2012Citrix Systems, Inc.Method and system for verification of an endpoint security scanUS8351333Aug 30, 2010Jan 8, 2013Citrix Systems, Inc.Systems and methods for communicating a lossy protocol via a lossless protocol using false acknowledgementsUS8352606Jan 8, 2013Citrix Systems, Inc.Method and system for assigning access control levels in providing access to networked content filesUS8363650Jul 22, 2005Jan 29, 2013Citrix Systems, Inc.Method and systems for routing packets from a gateway to an endpointUS8364785Dec 9, 2009Jan 29, 2013Citrix Systems, Inc.Systems and methods for domain name resolution interception cachingUS8495305Dec 30, 2005Jul 23, 2013Citrix Systems, Inc.Method and device for performing caching of dynamically generated objects in a data communication networkUS8499057Feb 22, 2011Jul 30, 2013Citrix Systems, IncSystem and method for performing flash crowd caching of dynamically generated objects in a data communication networkUS8504775Mar 12, 2007Aug 6, 2013Citrix Systems, IncSystems and methods of prefreshening cached objects based on user's current web pageUS8533846Nov 8, 2006Sep 10, 2013Citrix Systems, Inc.Method and system for dynamically associating access rights with a resourceUS8549149Dec 30, 2005Oct 1, 2013Citrix Systems, Inc.Systems and methods for providing client-side accelerated access to remote applications via TCP multiplexingUS8559449May 31, 2011Oct 15, 2013Citrix Systems, Inc.Systems and methods for providing a VPN solutionUS8566450Aug 20, 2012Oct 22, 2013Citrix Systems, Inc.Systems and methods for GSLB site persistenceUS8589579Oct 7, 2009Nov 19, 2013Citrix Systems, Inc.Systems and methods for real-time endpoint application flow control with network structure componentUS8613048Sep 30, 2004Dec 17, 2013Citrix Systems, Inc.Method and apparatus for providing authorized remote access to application sessionsUS8615583Jul 13, 2010Dec 24, 2013Citrix Systems, Inc.Systems and methods of revalidating cached objects in parallel with request for objectUS8634420May 25, 2010Jan 21, 2014Citrix Systems, Inc.Systems and methods for communicating a lossy protocol via a lossless protocolUS8700695Dec 30, 2005Apr 15, 2014Citrix Systems, Inc.Systems and methods for providing client-side accelerated access to remote applications via TCP poolingUS8701010Mar 12, 2007Apr 15, 2014Citrix Systems, Inc.Systems and methods of using the refresh button to determine freshness policyUS8706877 *Dec 30, 2005Apr 22, 2014Citrix Systems, Inc.Systems and methods for providing client-side dynamic redirection to bypass an intermediaryUS8726006Aug 21, 2012May 13, 2014Citrix Systems, Inc.System and method for establishing a virtual private networkUS8739274Jun 29, 2005May 27, 2014Citrix Systems, Inc.Method and device for performing integrated caching in a data communication networkUS8769156 *Dec 23, 2009Jul 1, 2014Citrix Systems, Inc.Systems and methods for maintaining transparent end to end cache redirectionUS8788581Jan 18, 2013Jul 22, 2014Citrix Systems, Inc.Method and device for performing caching of dynamically generated objects in a data communication networkUS8848710Jul 25, 2012Sep 30, 2014Citrix Systems, Inc.System and method for performing flash caching of dynamically generated objects in a data communication networkUS8856777Sep 2, 2010Oct 7, 2014Citrix Systems, Inc.Systems and methods for automatic installation and execution of a client-side acceleration programUS8892778Sep 14, 2012Nov 18, 2014Citrix Systems, Inc.Method and systems for securing remote access to private networksUS8897299Jan 11, 2013Nov 25, 2014Citrix Systems, Inc.Method and systems for routing packets from a gateway to an endpointUS8914522Jul 22, 2005Dec 16, 2014Citrix Systems, Inc.Systems and methods for facilitating a peer to peer route via a gatewayUS8954595Dec 30, 2005Feb 10, 2015Citrix Systems, Inc.Systems and methods for providing client-side accelerated access to remote applications via TCP bufferingUS8984407Dec 12, 2011Mar 17, 2015Citrix Systems, Inc.Methods and interfaces for displaying performance data related to a current remote access sessionUS9219579Jul 22, 2005Dec 22, 2015Citrix Systems, Inc.Systems and methods for client-side application-aware prioritization of network communicationsUS9237208 *May 23, 2014Jan 12, 2016Citrix Systems, Inc.Systems and methods for maintaining transparent end to end cache redirectionUS20040125403 *Oct 16, 2003Jul 1, 2004Xerox Corporation.Method and apparatus for enabling distributed subscription services, supplies maintenance, and device-independent service implementationUS20060029063 *Jul 22, 2005Feb 9, 2006Citrix Systems, Inc.A method and systems for routing packets from a gateway to an endpointUS20060037071 *Jul 22, 2005Feb 16, 2006Citrix Systems, Inc.A method and systems for securing remote access to private networksUS20060039354 *Jul 22, 2005Feb 23, 2006Citrix Systems, Inc.Systems and methods for client-side application-aware prioritization of network communicationsUS20060039356 *Jul 22, 2005Feb 23, 2006Citrix Systems, Inc.Systems and methods for facilitating a peer to peer route via a gatewayUS20060070131 *Sep 30, 2004Mar 30, 2006Citrix Systems, Inc.Method and apparatus for providing authorized remote access to application sessionsUS20060190455 *Mar 1, 2006Aug 24, 2006Braddy Ricky GMethod and system for assigning access control levels in providing access to networked content filesUS20060190719 *Jul 22, 2005Aug 24, 2006Citrix Systems, Inc.Systems and methods for communicating a lossy protocol via a lossless protocol using false acknowledgementsUS20060195547 *Dec 30, 2005Aug 31, 2006Prabakar SundarrajanSystems and methods for providing client-side accelerated access to remote applications via TCP multiplexingUS20060195605 *Dec 30, 2005Aug 31, 2006Prabakar SundarrajanSystems and methods for providing client-side accelerated access to remote applications via TCP bufferingUS20060195660 *Dec 30, 2005Aug 31, 2006Prabakar SundarrajanSystem and method for performing entity tag and cache control of a dynamically generated object not identified as cacheable in a networkUS20060200849 *Dec 30, 2005Sep 7, 2006Prabakar SundarrajanSystems and methods for providing client-side accelerated access to remote applications via TCP poolingUS20060242305 *Apr 20, 2006Oct 26, 2006Telefonaktiebolaget L M Ericsson (Publ)VPN Proxy Management ObjectUS20060248581 *Dec 30, 2005Nov 2, 2006Prabakar SundarrajanSystems and methods for providing client-side dynamic redirection to bypass an intermediaryUS20060253605 *Dec 30, 2005Nov 9, 2006Prabakar SundarrajanSystems and methods for providing integrated client-side acceleration techniques to access remote applicationsUS20070156852 *Dec 30, 2005Jul 5, 2007Prabakar SundarrajanSystem and method for performing flash crowd caching of dynamically generated objects in a data communication networkUS20070156965 *Dec 30, 2005Jul 5, 2007Prabakar SundarrajanMethod and device for performing caching of dynamically generated objects in a data communication networkUS20070156966 *Dec 30, 2005Jul 5, 2007Prabakar SundarrajanSystem and method for performing granular invalidation of cached dynamically generated objects in a data communication networkUS20080069005 *Sep 15, 2006Mar 20, 2008Citrix Systems, Inc.Methods for providing performance improvement recommendationsUS20080071905 *Sep 15, 2006Mar 20, 2008Citrix Systems, Inc.Methods and interfaces for displaying performance data related to a current remote access sessionUS20080109912 *Nov 8, 2006May 8, 2008Citrix Systems, Inc.Method and system for dynamically associating access rights with a resourceUS20080228772 *Mar 12, 2007Sep 18, 2008Robert PlamondonSystems and methods of prefreshening cached objects based on user's current web pageUS20080229024 *Mar 12, 2007Sep 18, 2008Robert PlamondonSystems and methods of dynamically checking freshness of cached objects based on link statusUS20080229025 *Mar 12, 2007Sep 18, 2008Robert PlamondonSystems and methods of using the refresh button to determine freshness policyUS20090287842 *Jul 21, 2009Nov 19, 2009Robert PlamondonSystems and methods of prefetching objects for caching using qosUS20100088398 *Dec 9, 2009Apr 8, 2010Robert PlamondonSystems and methods for domain name resolution interception cachingUS20100121972 *Oct 7, 2009May 13, 2010Samuels Allen RSystems and methods for real-time endpoint application flow control with network structure componentUS20100131639 *Nov 25, 2008May 27, 2010Raghav Somanahalli NarayanaSystems and Methods For GSLB Site PersistenceUS20100229228 *Sep 9, 2010Timothy Ernest SimmonsMethod and apparatus for associating tickets in a ticket hierarchyUS20100232429 *May 25, 2010Sep 16, 2010Rao Goutham PSystems and methods for communicating a lossy protocol via a lossless protocolUS20100281112 *Nov 4, 2010Robert PlamondonSystems and methods of revalidating cached objects in parallel with request for objectUS20100325299 *Aug 30, 2010Dec 23, 2010Rao Goutham PSystems and Methods for Communicating a Lossy Protocol Via a Lossless Protocol Using False AcknowledgementsUS20110145330 *Jun 16, 2011Prabakar SundarrajanSystem and method for performing flash crowd caching of dynamically generated objects in a data communication networkUS20110153937 *Dec 23, 2009Jun 23, 2011Saravanakumar AnnamalaisamiSystems and methods for maintaining transparent end to end cache redirectionUS20110231929 *Sep 22, 2011Rao Goutham PSystems and methods for providing a vpn solutionUS20120212404 *Aug 23, 2012Sony Computer Entertainment Inc.Information processing device, information processing terminal device, information processing system, information processing method, and computer readable storage mediumUS20140258390 *May 23, 2014Sep 11, 2014Citrix Systems, Inc.Systems and methods for maintaining transparent end to end cache redirection* Cited by examinerClassifications U.S. Classification709/217, 711/118International ClassificationG06F15/16Cooperative ClassificationH04L67/2842, H04L63/166, H04L63/0485, H04L63/168European ClassificationH04L29/08N27S, H04L63/16G, H04L63/04B14, H04L63/16DLegal EventsDateCodeEventDescriptionJun 29, 2005ASAssignmentOwner name: NETSCALER, INC., CALIFORNIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KHEMANI, PRAKASH;SUNDARRAJAN, PRABAKAR;KUMAR, LAKSHMI;AND OTHERS;SIGNING DATES FROM 20050614 TO 20050627;REEL/FRAME:016743/0482May 9, 2007ASAssignmentOwner name: CITRIX APPLICATION NETWORKING, LLC, CALIFORNIAFree format text: CHANGE OF NAME;ASSIGNOR:NCAR, LLC;REEL/FRAME:019268/0633Effective date: 20051104Owner name: NCAR, LLC, CALIFORNIAFree format text: MERGER;ASSIGNOR:NETSCALER, INC.;REEL/FRAME:019268/0368Effective date: 20050815Apr 23, 2013ASAssignmentOwner name: CITRIX SYSTEMS, INC., FLORIDAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:CITRIX APPLICATION NETWORKING, LLC;REEL/FRAME:030265/0903Effective date: 20130409RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services