Selection of gateways for reconnection upon detection of reachability issues with backend resources
Described embodiments provide system and methods for selecting a device via which a client is to connect with a server. A client may identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate. The client may detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate. The client may select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server. The client may authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server.
1. A method of selecting a device via which a client is to connect to a server, comprising:
identifying, by a client, a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate;
detecting that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate;
selecting, by the device responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and
authenticating, by the client using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server.
2. The method of claim 1 , further comprising receiving, by the client, for establishing the first connection with the first device, the certificate to authenticate the client to connect with a network for secure communications.
3. The method of claim 1 , wherein identifying the server and the plurality of devices further comprises receiving a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices.
4. The method of claim 1 , wherein detecting that the server is unreachable further comprises monitoring for at least one response from the server to a message transmitted by at least one of the client or the first device.
5. The method of claim 1 , wherein detecting that the server is unreachable further comprises receiving, from the first device, an indication that the first device is unable to connect with the server.
6. The method of claim 1 , wherein selecting the second device further comprises selecting the second device from the plurality of device in accordance with a profile, the profile identifying a sequence for selection of the plurality of devices.
7. The method of claim 1 , wherein selecting the second device further comprises selecting the second device from the plurality of devices based at least on a network load of at least one of the plurality of devices.
8. The method of claim 1 , wherein establishing the second connection further comprises re-using the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials.
9. The method of claim 1 , wherein establishing the second connection further comprises providing a prompt to a user of the client to enter authentication credentials for establishing the second connection.
10. The method of claim 1 , further comprising:
determining, by the client, that the server is unreachable from the client via none of the plurality of devices; and
providing, by the client, an indication that the server is unreachable via none of the plurality of devices.
11. A system for selecting a device via which a client is to connect to a server, comprising:
a client having one or more processors coupled with memory, configured to:
identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate;
detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate;
select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and
authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server.
12. The system of claim 11 , wherein the client is further configured to receive a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices.
13. The system of claim 11 , wherein the client is further configured to select the second device from the plurality of device in accordance with a profile, the profile identifying a sequence for selection of the plurality of devices.
14. The system of claim 11 , wherein the client is further configured to select the second device from the plurality of devices based at least on a network load of at least one of the plurality of devices.
15. The system of claim 11 , wherein the client is further configured to re-use the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials.
16. The system of claim 11 , wherein the client is further configured to provide a prompt to a user of the client to enter authentication credentials for establishing the second connection.
17. The system of claim 11 , wherein the client is further configured to:
determine that the server is unreachable from the client via none of the plurality of devices; and
provide an indication that the server is unreachable via none of the plurality of devices.
18. A non-transitory computer readable medium storing program instructions for causing one or more processors to:
identify a server and a plurality of devices intermediary to the client and the server via one of which the client is authenticated to connect to access the server using a certificate;
detect that the server is unreachable from the client authenticated to use a first connection via a first device of the plurality of devices using the certificate;
select, responsive to detecting that the server is unreachable, a second device of the plurality of devices via which the client is to access the server; and
authenticate, using the certificate used to authenticate with the first device, the client to establish a second connection with the second device to access the server.
19. The non-transitory computer readable medium of claim 18 , wherein the program instructions further cause the one or more processors to receive a profile associated with the certificate for the client, the profile identifying a plurality of servers which the client is to access via the plurality of devices.
20. The non-transitory computer readable medium of claim 18 , wherein the program instructions further cause the one or more processors to re-use the certificate used to authenticate the client in the first connection to authenticate the client for the second connection, without providing a prompt to a user of the client to enter authentication credentials.