Method to track ssl session states for ssl optimization of saas based applications

Abstract

Described embodiments provide systems and methods for initiating establishment of a connection. The system may include a device intermediary between a client and a server. The device may determine at least one server name indicator (SNI) for an application executing on the client and having a secure session established with the server. The device may determine, for each domain name corresponding to the at least one SNI, a session timeout value for the corresponding domain name. The device may send a message to the client according to each session timeout value, to cause the client to initiate establishment of a connection for the corresponding domain name using the secure session.

We claim: 
     
         1 . A method comprising:
 identifying, by a device, one or more indicators of a session established between a server and a client to access;   identifying, by the device, at least one domain name corresponding to the one or more indicators and a timeout value of the session for the at least one domain name; and   communicating, by the device, a message to the client to cause the client to use the session to access the at least one domain and the timeout value for the session.   
     
     
         2 . The method of  claim 1 , further comprising identifying, by the device, the one or more indicators of an application accessed via the session. 
     
     
         3 . The method of  claim 2 , further comprising identifying, the timeout value for the application accessing the one or more domain names via the session. 
     
     
         4 . The method of  claim 2 , further comprising determining, by the device, the one or more indicators based at least on historical data of the application used to access one or more resources of the server. 
     
     
         5 . The method of  claim 1 , further comprising determining, by the device, the one or more indicators based at least on historical data of the client accessing one or more resources of the server. 
     
     
         6 . The method of  claim 1 , further comprising determining, by the device, the one or more indicators based at least on access to one or more resources of the server. 
     
     
         7 . The method of  claim 1 , wherein the session comprises a secure socket layer session. 
     
     
         8 . A device comprising:
 one or more processors, coupled to memory and configured to:   identify one or more indicators of a session established between a server and a client to access;   identify one or more domain names corresponding to the one or more indicators and a timeout value of the session for at least one of the one or more domains names; and   communicate a message to the client to cause the client to use the session for accessing the at least one domain name and the timeout value for the session.   
     
     
         9 . The device of  claim 8 , wherein the one or more processors are further configured to identify the one or more indicators of an application accessed via the session. 
     
     
         10 . The device of  claim 9 , wherein the one or more processors are further configured to identify the timeout value for the application accessing the one or more domain names via the session. 
     
     
         11 . The device of  claim 9 , wherein the one or more processors are further configured to determine the one or more indicators based at least on historical data of the application to access one or more resources of the server. 
     
     
         12 . The device of  claim 8 , wherein the one or more processors are further configured to determine the one or more indicators based at least on historical data of the client accessing one or more resources of the server. 
     
     
         13 . The device of  claim 8 , wherein the one or more processors are further configured to determine the one or more indicators based at least on access to one or more resources of the server. 
     
     
         14 . The device of  claim 8 , wherein the session comprises a secure socket layer session. 
     
     
         15 . A system comprising:
 one or more processors, coupled to memory and configured to:   identify one or more domain names of one or more servers used by an application, the application accessed by a client via one or more sessions established between the client and the one or more servers;   identify for the one or more sessions a session timeout value of the application for at least one of the one or more domain names; and   communicate a message to the client, wherein the message comprises instructions for the client to establish a connection to at least one of the one or more domain names using the session and to use the session timeout value.   
     
     
         16 . The system of  claim 15 , wherein the one or more processors are further configured to identify one or more indicators of an application accessed via the one or more sessions. 
     
     
         17 . The system of  claim 16 , wherein the one or more processors are further configured to determine the one or more domains corresponding to the one or more indicators. 
     
     
         18 . The system of  claim 15 , wherein the one or more processors are further configured to determine the one or more domains based at least on historical data of the application to access one or more resources of the server. 
     
     
         19 . The system of  claim 15 , wherein the one or more processors are further configured to determine the one or more domains based at least on historical data of the client accessing one or more resources of the server. 
     
     
         20 . The system of  claim 15 , wherein the one or more processors are further configured to determine the one or more domains based at least on access to one or more resources of the server.