Management of session timeouts in an SSL VPN gateway
View Patent ↗A network device may manage communication sessions with clients so that attempts at the client to automatically keep the session alive can be ignored for purposes of timing out the session. The device may examine resource requests received from the client as uniform resource locators (URLs) and determine whether the URLs include a context variable. The device may determine whether to reset a timeout period for the communication session based on a presence of the context variable in the URL. At the client side, the context variable may be attached to URLs that are part of functions configured to automatically access the network device.
1. A method comprising:
receiving, via a server device, a resource request as part of a secure communication session with a client;
determining, via a server device, whether the resource request includes a uniform resource locator (URL) and a context variable, where the context variable indicates that the resource request was generated by a periodically called function;
determining, via a server device, to reset a timeout period for the secure communication session in response to determining that the resource request does not include the context variable; and
determining to not reset the timeout period for the secure communication session when the context variable is present in the resource request.
2. The method of claim 1 , where the secure communication session is an SSL session.
3. The method of claim 2 , where the SSL session is initiated from a browser program.
4. The method of claim 1 , where the resource request is received from a public network and is directed to a server within a proprietary network.
5. The method of claim 1 , further comprising:
transmitting a response to the resource request to the client via the secure communication session.
6. The method of claim 1 , where the context variable includes an indication of a periodicity of the resource request.
7. A network device comprising:
a processor; and
a computer memory operatively coupled to the processor, the computer memory including:
programming instructions to establish a session between the network device and a client device;
programming instructions to examine a resource request received from the client device, where the resource request includes a uniform resource locator (URL);
programming instructions to reset a timeout period for the session between the network device and the client device in response to the examined resource request not including a context indication, the context indication being inserted into the resource request independently of an initial implementation of the resource request, where the context indication indicates that the examined resource request was generated by a periodically called function, and where the context indication includes a context variable appended to the URL; and
programming instructions to not reset the timeout period when the examined resource request includes the context indication.
8. The network device of claim 7 , where the context variable in the URL indicates that the resource request was generated by an automatically called function.
9. The network device of claim 7 , where the context variable includes an indication of a periodicity of the resource request.
10. The network device of claim 7 , where the session between the network device and the client device is a secure sockets layer (SSL) connection.
11. The network device of claim 7 , where the network device is to function as an SSL virtual private network (VPN) gateway.
12. A system comprising:
a client device to:
implement a security application to attach context information to a resource request for a remote resource requested from a browser application when the resource request is automatically generated by a periodically called function, where the context information indicates that the resource request was generated by the periodically called function, where the resource request includes a uniform resource locator (URL) and the context information includes a context variable appended to the URL; and
a gateway device to:
receive the resource request,
determine whether to reset a session timeout value for the client device based on whether the context information is included in the resource request,
reset the session timeout value for the client device when the resource request does not include the context variable, and
not reset the session timeout value for the client device when the resource request includes the context variable.
13. The system of claim 12 , where the client device and the gateway device communicate over a secure sockets layer (SSL) connection.
14. The system of claim 12 , where the gateway device in as an SSL virtual private network (VPN) gateway.
15. The system of claim 12 , where the client device is further to:
execute scripting language to call the periodically called function.