Systems and methods for a VPN ICA proxy on a multi-core system
The present invention is directed towards systems and methods for sharing licenses across resources via a multi-core intermediary device. A device intermediary to a plurality of clients and a server may grant a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client. A second core of the plurality of cores may receive a first request from the client to establish an application connection between an application and a server via the VPN session. The second core may send a second request to the first core to share the license of the VPN session responsive to determining that the first core owns the VPN session. The second core may establish the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.
1. A method comprising:
(a) maintaining, by a device intermediary to a plurality of clients and one or more servers, a provisioning list to track usage of a license for a secured session among a plurality of cores of the device, to access a resource of the one or more servers using the secured session;
(b) accessing, by a first core of the plurality of cores responsive to receiving a request from a client of the plurality of clients to access the resource, the provisioning list and identifying from the provisioning list that the license to access the resource using the secured session is granted to a second core of the plurality of cores that established the secured session;
(c) sending, by the first core, a second request to the second core that established the secured session, to share the license for the secured session with the first core for the first core to access the resource;
(d) indicating, by the device, in the provisioning list, sharing of the license for the secured session to the first core, including an indication that the license is granted to the first core to access the resource; and
(e) accessing, by the first core, the resource after access to the resource is released by the second core responsive to the license being granted to the first core.
2. The method of claim 1 , further comprising managing, by a license manager of the device, a pool of licenses for the resource.
3. The method of claim 2 , further comprising granting, by the license manager, to the first core the license to the access the resource from the pool of licenses.
4. The method of claim 3 , further comprising indicating, by a provisioning manager, in the provision list that the first core has the license to access the resource.
5. The method of claim 1 , wherein (b) further comprises receiving, by the device the request from the client to access the resource comprising one of the following: an application, a database, a file, a web page, a connection and a session.
6. The method of claim 1 , wherein (c) further comprises receiving, by the first core, a response from the second core accepting the second request to share the license.
7. The method of claim 6 , wherein (d) further comprises establishing, by the first core responsive to the second core accepting the second request, access to the resource.
8. The method of claim 6 , further comprising releasing, by the second core responsive to the accepting the second request, access to the resource using the second core.
9. The method of claim 1 , further comprising allowing, by the device, the first core and the second core to access the resource using the shared license.
10. A system comprising:
a device comprising hardware and a plurality of cores, the device intermediary to a plurality of clients and one or more servers;
a provisioning list configured to track usage of a license for a secured session among the plurality of cores, to access a resource of the one or more servers using the secured session;
a first core of the plurality of cores configured to:
access the provisioning list responsive to receiving a request from a client of the plurality of clients to access the resource;
identify from the provisioning list that the license to access the resource using the secured session is granted to a second core of the plurality of core that established the secured session;
send a second request to the second core that established the secured session;
share the license with the first core for the first core to access the resource; and
access the resource after access to the resource is released by the second core responsive to the license being granted to the first core; and
wherein the device is configured to indicate in the provisioning list sharing of the license for the secured session to the first core, including an indication that the license is granted to the first core to access the resource.
11. The system of claim 10 , further comprising a license manager of the device configured to manage a pool of licenses for a plurality of resources.
12. The system of claim 11 , wherein the license manager is further configured to grant to the first core the license to the access the resource from the pool of licenses.
13. The system of claim 12 , further comprising a provisioning manager configured to indicate in the provision list that the first core has the license to access the resource.
14. The system of claim 10 , wherein the device is further configured to receive the request from the client to access the resource comprising one of the following: an application, a database, a file, a web page, a connection and a session.
15. The system of claim 10 , wherein the first core is further configured to receive a response from the second core accepting the second request to share the license.
16. The system of claim 15 , wherein the first core is further configured to establish, responsive to the second core accepting the second request, access to the resource.
17. The system of claim 15 , wherein the second core is further configured to release, responsive to accepting the second request, access to the resource using the second core.
18. The system of claim 10 , wherein the device is further configured to allow the first core and the second core to access the resource using the shared license.