Layer 7 application classification

1. A method comprising:

receiving, at a first network device, one or more packets associated with a layer 7 application session of a client device;

storing at least a portion of each of the one or more packets received at the first network device in a layer 7 application buffer;

sending at least a subportion of the portion of at least one of the one or more packets stored in the layer 7 application buffer to a second network device;

determining application information for the layer 7 application from the at least a subportion of the portion of at least one of the one or more packets;

classifying the layer 7 application using the application information to maintain layer 7 state when the client device roams from the first network device to the second network device.

2. The method of claim 1 , further comprising managing layer 7 application based features associated with executing the layer 7 application using a classification of the layer 7 application and policy information.

3. The method of claim 1 , further comprising:

determining whether the layer 7 application is a prohibited application based on a classification of the layer 7 application and policy information;

if it is determined that the layer 7 application is prohibited, ending the session.

4. The method of claim 1 , further comprising:

determining a priority level of the layer 7 application using a classification of the layer 7 application and policy information;

shaping traffic used in executing the layer 7 application on the client device based on the priority level of the layer 7 application.

5. The method of claim 1 , further comprising:

generating session information using the at least a portion of each of the one or more packets in the layer 7 application buffer;

adding additional packets or portions thereof to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the session based on the session information.

6. The method of claim 5 , wherein the additional packets are received at the first network device.

7. The method of claim 5 , wherein the additional packets are received at the second network device.

8. The method of claim 1 , further comprising:

determining a classification level for the layer 7 application that will be achieved based on the portions of the packets included in the layer 7 application buffer;

determining whether the classification level for the layer 7 application is greater than or equal to a desired classification level;

if it is determined that the classification level for the layer 7 application is greater than or equal to the desired classification level, adding additional packets or portions thereof to the layer 7 application to dynamically adjust a size of the layer 7 application buffer during the session.

9. The method of claim 1 , further comprising:

generating a confidence score that a desired classification level for the layer 7 application can be achieved based on the packets or portions thereof in the layer 7 application buffer;

determining whether the desired classification level for the layer 7 application can be achieved;

if it is determined that the desired classification level will be missed, adding additional packets or portions thereof to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the session.

10. The method of claim 1 , wherein the packets or portions thereof added to the layer 7 application buffer are copies of packets or portions thereof received by the first network device.

11. A system comprising:

a first layer 7 state synchronization subsystem configured to:

store one or more packets or portions thereof in a layer 7 application buffer, wherein the packets are part of a layer 7 application session between a first network device and a client device;

send at least a portion of the one or more packets or portions thereof to a second network device;

a second layer 7 state synchronization subsystem configured to:

determine application information from the at least a portion of the one or more packets or portions thereof;

classify the layer 7 application using the application information;

maintain layer 7 state when the client device roams from the first network device to the second network device.

12. The system of claim 11 , further comprising a layer 7 application based features management engine implemented on or associated with the second network device, the layer 7 application based features management engine configured to manage layer 7 application based features associated with executing the layer 7 application using a classification of the layer 7 application and policy information.

13. The system of claim 11 , further comprising a layer 7 application based features management engine implanted on or associated with the second network device, the layer 7 application based features management engine configured to:

determine whether the layer 7 application is a prohibited application based on a classification of the layer 7 application and policy information;

if it is determined that the layer 7 application is prohibited, end the session.

14. The system of claim 11 , further comprising a layer 7 application based features management engine implanted on or associated with the second network device, the layer 7 application based features management engine configured to:

determine a priority level of the layer 7 application using a classification of the layer 7 application and policy information;

shape data traffic used in executing the layer 7 application on the client device based on the priority level of the layer 7 application.

15. The system of claim 11 , wherein the first layer 7 state synchronization subsystem is further configured to:

generate session information based on packets or portions thereof included in the layer 7 application buffer;

add additional packets or portions thereof received by the first network device to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the layer 7 application session based on the session information.

16. The system of claim 11 , wherein the second layer 7 state synchronization subsystem is further configured to:

generate session information based on packets or portions thereof included in the layer 7 application buffer;

add additional packets received by the second network device to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the layer 7 application session based on the session information.

17. The system of claim 11 , wherein first layer 7 state synchronization subsystem is further configured to:

determine a classification level for the layer 7 application that will be achieved based on the packets or portions thereof included in the layer 7 application buffer;

determine whether the classification level for the layer 7 application is greater than or equal to a desired classification level;

add additional packets or portions thereof received by the first network device to the layer 7 application to dynamically adjust a size of the layer 7 application buffer during the session, if it is determined that the classification level for the layer 7 application is greater than or equal to the desired classification level.

18. The system of claim 11 , wherein the second layer 7 state synchronization subsystem is further configured to:

determine a classification level for the layer 7 application that will be achieved based on the packets or portions thereof included in the layer 7 application buffer;

determine whether the classification level for the layer 7 application is greater than or equal to a desired classification level;

add additional packets or portions thereof received by the second network device to the layer 7 application to dynamically adjust a size of the layer 7 application buffer during the session, if it is determined that the classification level for the layer 7 application is greater than or equal to the desired classification level.

19. The system of claim 11 , wherein the first layer 7 state synchronization subsystem is further configured to:

generate a confidence score that a desired classification level for the layer 7 application can be achieved using the packets or portions thereof included in the layer 7 application buffer;

determine whether the desired classification level for the layer 7 application can be achieved;

add additional packets or portions thereof received by the first network device to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the session, if it is determined that the desired classification level will be missed.

20. The system of claim 11 , wherein the second layer 7 state synchronization subsystem is further configured to:

generate a confidence score that a desired classification level for the layer 7 application can be achieved using the packets or portions thereof included in the layer 7 application buffer;

determine whether the desired classification level for the layer 7 application can be achieved;

add additional packets or portions thereof received by the second network device to the layer 7 application buffer to dynamically adjust a size of the layer 7 application buffer during the session, if it is determined that the desired classification level will be missed.