Arindum Mukerji

7657618, Feb 2, 2010

May 27, 2005

11/139061

Jesse Abraham Rothstein - Seattle WA, US
Arindum Mukerji - Seattle WA, US

F5 Networks, Inc. - Seattle WA

G06F 15/173
G06F 15/16
G06F 9/46

709223, 709232, 718105

A system, apparatus, and method are directed to managing multiple back-end connections for pipelined HTTP communications. A traffic management device is configured to open back-end connections to multiple servers. The traffic management device distributes HTTP requests from a client device across multiple server connections. Instead of buffering the responses to ensure that each are returned in a same order as the requests, the traffic management device throttles a TCP receive window between all of the back-end server connections, but that back-end server connection associated with a first expected response. As each response is sent to the client device, the TCP window for the next back-end server connection is opened. This effectively offloads any significant buffering onto the back-end servers, enabling the traffic management device to return the responses in the same order as the requests.

7783781, Aug 24, 2010

Oct 5, 2005

11/243629

Jesse Abraham Rothstein - Seattle WA, US
David D. Schmitt - Seattle WA, US
Arindum Mukerji - Seattle WA, US

F5 Networks, Inc. - Seattle WA

G06F 15/16
G06F 15/173

709247, 709223

A method, system, and apparatus are directed towards compression of content over a network. The content may include content length information, such as within a header. In one embodiment, a portion of the content may be compressed to approximately fill a buffer of a predefined size. If there remains additional uncompressed content, a new content length may be determined based in part on the length of the compressed content and the remaining uncompressed content. The buffered content and the new content length may then be forwarded in response to the request. The remaining uncompressed content may be split into predefined blocks using identity compression. Identity compression may then be applied to the remaining uncompressed content which is then forwarded to a destination in response to the request.

7826487, Nov 2, 2010

Jun 9, 2005

11/150361

Arindum Mukerji - Seattle WA, US
Jesse Abraham Rothstein - Seattle WA, US

F5 Network, Inc - Seattle WA

H04J 3/18
H04L 12/28

370477, 370394

A system, apparatus, and method are directed to managing network communications by, in part, reducing a number of packets between a client and a server communicating through another device, such as a traffic management device (TMD). The invention reduces the number of packets communicated, in part, by coalescing acknowledgements (ACKs) and/or finish (FIN) flags into another packet. In one embodiment, if the client provides a substantially complete request for the server, an ACK to the request may be coalesced into a corresponding response from the server. When another request is to be provided to the server, within about half of the minimum retransmission timeout, an ACK to the prior response may be coalesced into a subsequent request to the server. Packet reduction may also be achieved by stretching a packet to insert additional data when the insertion maintains a packet size that is within a negotiated maximum segment size (MSS).

7873065, Jan 18, 2011

Feb 1, 2006

11/344687

Arindum Mukerji - Seattle WA, US
Jesse Abraham Rothstein - Seattle WA, US

F5 Networks, Inc. - Seattle WA

H04L 12/54

370429, 370353, 37039541

A method, system, and apparatus are directed towards selectively concatenating data into a packet to modify a number of packets transmitted over a network based on a combination of network and/or send-queue metrics. In one embodiment, Nagle's algorithm is used for concatenating data into a packet. The concatenation may be selectively enabled based on heuristics applied to the combination of metrics. In one embodiment, the result may indicate that there should be a concatenation, or that data should be sent immediately, or that a current state for whether to concatenate or not should be maintained. The heuristics may include an expert system, decision tree, truth table, function, or the like. The heuristics may be provided by a user, or another computing device. In another embodiment, the concatenation may be enabled based on a conditional probability determined from the combination of metrics.

7921282, Apr 5, 2011

Oct 26, 2007

11/925157

Arindum Mukerji - Seattle WA, US
Jesse Abraham Rothstein - Seattle WA, US

F5 Networks, Inc. - Seattle WA

H04L 9/00
G06F 7/04

713151, 713152, 713153, 713168, 713169, 713170, 726 34, 726 4, 726 5, 726 6, 726 7

A method, apparatus, and system are directed toward managing a Transmission Control Protocol/Internet Protocol (TCP/IP) handshake. A SYN-ACK cookie is determined based on a cryptographic operation using a secret key and at least one network characteristic. The SYN-ACK cookie is provided in a SYN message's field. The SYN message is sent from a client to a server. Another sequence number based on the received SYN-ACK cookie is included in a SYN-ACK message. The SYN-ACK message is sent to and received by the client. The other sequence number is validated based on the secret key to generate at least another network characteristic. A TCP/IP connection is established if the network characteristic matches the other network characteristic. In one embodiment, the component sending the SYN message may be a different component than the component receiving the SYN-ACK message. In this embodiment, the secret key may be shared between the two components.

7953838, May 31, 2011

Jan 16, 2009

12/355518

Arindum Mukerji - Seattle WA, US

F5 Networks, Inc. - Seattle WA

G06F 15/173

709223, 709224, 709235, 709239

A system, apparatus, and method for managing TCP over TCP communications using multiple TCP network connections. A plurality of tunneled network connections may be established between network devices. The network devices may employ one of the tunneled network connections over which to establish a plurality of application sessions. If congestion is detected on the employed tunneled network connection that exceeds a threshold, then a reset flag may be sent to abort that tunneled network connection. At least some of the application sessions are also transferred to another one of plurality of tunneled network connections, without terminating the moved application sessions. In one embodiment, at least one more tunneled network connection may be established between the network devices.

7979555, Jul 12, 2011

Feb 27, 2007

11/679356

Jesse Abraham Rothstein - Seattle WA, US
Arindum Mukerji - Seattle WA, US

ExtraHop Networks,Inc. - Seattle WA

G06F 15/16

709227, 709224, 709225, 709246, 709249

A system and method for capture and resumption of network application sessions in a network system. A transaction may be detected between a client and server that includes application session state information. The session state information may relate to a session between the client and the server. The Application session state information may be recorded in response to the detection of the transaction, and the application session state information may not be deleted according to session information expiration policies (e. g. , of the client). User input may be received which requests to review the captured network application session. Correspondingly, a network request comprising captured credentials of the captured session may be generated and forwarded to the server. The network request may be usable to enable resumption of the captured network application session.

8010668, Aug 30, 2011

Dec 29, 2010

12/981338

Jesse A. Rothstein - Seattle WA, US
Arindum Mukerji - Seattle WA, US

F5 Networks, Inc. - Seattle WA

G06F 15/173
G06F 15/16

709224, 709249

A system, apparatus, and method selectively provides content compression to a client based, in part, on whether the network connection from the client is determined to be a high latency, low-bandwidth connection. The present invention gathers one or more network metrics associated with the connection from the client. In one embodiment, the metrics include estimated TCP metrics, including smoothed round trip time, maximum segment size (MSS), and bandwidth delay product (BWDP). These estimated network metrics are employed to make an application layer decision of whether the client connection is a high latency, low-bandwidth connection. If it is, then content may be selectively compressed virtually on the fly for transfer over the network connection. In one embodiment, the selective compression uses a content encoding compression feature of the HTTP protocol standard.