Layer 7 application classification
Maintaining layer 7 state as a client device roams between network devices during a session. Data packets used in executing a layer 7 application are received at a first network device that a client device is coupled to during a session. Data packets received by the first network device are stored in a layer 7 application buffer that is sent to a second network device that a client device roams to during a session. A layer 7 application buffer is used to classify a layer 7 application that is the subject of a session in order to maintain layer 7 state as a client device roams to a second network device during a session.
1. A method, comprising:
storing, in a layer 7 application buffer associated with a session of a layer 7 application executed on a client device, one or more first packets for the session or a copy of the one or more first packets received at a first network device in response to the client device being coupled to the first network device;
storing, in the layer 7 application buffer, one or more second packets for the session or a copy of the one or more second packets received at a second network device in response to the client device being coupled to the second network device after being decoupled from the first network device;
determining application information of the layer 7 application based on packets for the session stored in the layer 7 application buffer, wherein the packets for the session stored in the layer 7 application buffer comprise at least one of the one or more first packets and at least one of the one or more second packets;
determining a classification of the layer 7 application based on the application information; and
managing the session of the layer 7 application based on the classification of the layer 7 application.
2. The method of claim 1 , wherein the managing the session of the layer 7 application based on the classification of the layer 7 application comprises terminating the session of the layer 7 application in response to determining that the classification of the layer 7 application is a predetermined classification.
3. The method of claim 1 , wherein the managing the session of the layer 7 application based on the classification of the layer 7 application comprises sending a notification to the client device that the layer 7 application is prohibited upon determining that the classification of the layer 7 application is a predetermined classification.
4. The method of claim 1 , wherein the managing the session of the layer 7 application based on the classification of the layer 7 application comprises delaying transmission of packets for the session in response to determining that the classification of the layer 7 application is a predetermined classification.
5. The method of claim 1 , wherein the managing the session of the layer 7 application based on the classification of the layer 7 application comprises maintaining a layer 7 state for the session based on the packets for the session stored in the layer 7 application buffer in response to determining that the classification of the layer 7 application is a predetermined classification.
6. The method of claim 1 , wherein the application information comprises at least one of a type of the session, an identification of the layer 7 application, or web applications used in executing the layer 7 application.
7. The method of claim 1 , further comprising dynamically increasing a size of the layer 7 application buffer based on an amount of the application information.
8. The method of claim 1 , wherein the layer 7 application buffer is at least partially provided in the first network device.
9. The method of claim 1 , wherein the layer 7 application buffer is at least partially provided in the second network device.
10. The method of claim 1 , wherein the layer 7 application buffer is at least partially provided at a location remote from the first and second network devices.
11. A system, comprising:
one or more processors;
memory storing instructions configured to instruct the one or more processors to:
store, in a layer 7 application buffer associated with a session of a layer 7 application executed on a client device, one or more first packets for the session or a copy of the one or more first packets received at a first network device in response to the client device being coupled to the first network device;
store, in the layer 7 application buffer, one or more second packets for the session or a copy of the one or more second packets received at a second network device in response to the client device being coupled to the second network device after being decoupled from the first network device;
determine application information of the layer 7 application based on packets for the session stored in the layer 7 application buffer, wherein the packets for the session stored in the layer 7 application buffer comprise at least one of the one or more first packets and at least one of the one or more second packets;
determine a classification of the layer 7 application based on the application information; and
manage the session of the layer 7 application based on the classification of the layer 7 application.
12. The system of claim 11 , wherein to manage the session of the layer 7 application based on the classification of the layer 7 application, the instructions are further configured to instruct the one or more processors to terminate the session of the layer 7 application in response to determining that the classification of the layer 7 application is a predetermined classification.
13. The system of claim 11 , wherein to manage the session of the layer 7 application based on the classification of the layer 7 application, the instructions are further configured to instruct the one or more processors to send a notification to the client device that the layer 7 application is prohibited in response to determining that the classification of the layer 7 application is a predetermined classification.
14. The system of claim 11 , wherein to manage the session of the layer 7 application based on the classification of the layer 7 application, the instructions are further configured to instruct the one or more processors to delay transmission of packets for the session in response to determining that the classification of the layer 7 application is a predetermined classification.
15. The system of claim 11 , wherein to manage the session of the layer 7 application based on the classification of the layer 7 application, the instructions are further configured to instruct the one or more processors to maintain a layer 7 state for the session based on the packets for the session stored in the layer 7 application buffer in response to determining that the classification of the layer 7 application is a predetermined classification.
16. The system of claim 11 , wherein the application information comprises at least one of a type of the session, an identification of the layer 7 application, or web applications used in executing the layer 7 application.
17. The system of claim 11 , wherein the instructions are further configured to instruct the one or more processors to dynamically increase a size of the layer 7 application buffer based on an amount of the application information.
18. The system of claim 11 , wherein the layer 7 application buffer is at least partially provided in the first network device.
19. The system of claim 11 , wherein the layer 7 application buffer is at least partially provided in the second network device.
20. The system of claim 11 , wherein the layer 7 application buffer is at least partially provided at a location remote from the first and second network devices.