Endpoint context agent traversal of network address table
A method, system, and computer-usable medium are disclosed for: (i) communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and (ii) communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device may use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache.
1. A computer-implemented method for managing network communication, comprising:
communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and
communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device is operable to use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache;
wherein the metadata connection is a side channel isolated from the data connection, and wherein prior to communicating the packet, the client device is configured to insert, into a header of the packet, the connection identifier and a metadata connection identifier that uniquely identifies the side channel.
2. The method of claim 1 , wherein the packet that includes the connection identifier is an initial packet communicated from the client device as part of the network traffic.
3. The method of claim 1 , wherein the connection identifier is part of a custom header of the packet that includes the connection identifier.
4. The method of claim 1 , wherein the network traffic is communicated in response to a message from the security device to the client device indicating the security device has received the metadata.
5. The method of claim 1 , wherein the metadata comprises Endpoint Context Agent metadata.
6. A system comprising:
a processor; and
a non-transitory, computer-readable storage medium comprising instructions executable by the processor and configured for:
communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and
communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device is operable to use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache;
wherein the metadata connection is a side channel isolated from the data connection, and wherein prior to communicating the packet, the client device is configured to insert, into a header of the packet, the connection identifier and a metadata connection identifier that uniquely identifies the side channel.
7. The system of claim 6 , wherein the packet that includes the connection identifier is an initial packet communicated from the client device as part of the network traffic.
8. The system of claim 6 , wherein the connection identifier is part of a custom header of the packet that includes the connection identifier.
9. The system of claim 6 , wherein the network traffic is communicated in response to a message from the security device to the client device indicating the security device has received the metadata.
10. The system of claim 6 , wherein the metadata comprises Endpoint Context Agent metadata.
11. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and
communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device is operable to use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache;
wherein the metadata connection is a side channel isolated from the data connection, and wherein prior to communicating the packet, the client device is configured to insert, into a header of the packet, the connection identifier and a metadata connection identifier that uniquely identifies the side channel.
12. The storage medium of claim 11 , wherein the packet that includes the connection identifier is an initial packet communicated from the client device as part of the network traffic.
13. The storage medium of claim 11 , wherein the connection identifier is part of a custom header of the packet that includes the connection identifier.
14. The storage medium of claim 11 , wherein the network traffic is communicated in response to a message from the security device to the client device indicating the security device has received the metadata.
15. The storage medium of claim 11 , wherein the metadata comprises Endpoint Context Agent metadata.