Non-translated port oversubscribing for a proxy device

Abstract

In some implementations, a proxy device may intercept a client session associated with a client device and a destination device. The proxy device may allocate a first port of the proxy device as a source port of a proxy session for the client session. The proxy device may determine, based on allocating the first port, whether session information associated with the proxy session would match session information associated with another proxy session. The proxy device may initiate the proxy session. A source port of the proxy session is the first port of the proxy device based on a determination that the session information associated with the proxy session would not match session information associated with another proxy session, or is a second port of the proxy device based on a determination that the session information associated with the proxy session would match session information associated with another proxy session.

What is claimed is: 
     
         1 . A method of oversubscribing for a proxy device, the method comprising:
 allocating, by a proxy device, a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and   initiating, by the proxy device, the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port,
 wherein the source port of the first proxy session is one of:
 the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or 
 a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session. 
 
   
     
     
         2 . The method of  claim 1 , further comprising:
 storing mapping information that associates the first proxy session with the client session.   
     
     
         3 . The method of  claim 1 , further comprising:
 allocating the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and   determining that the session information associated with the first proxy session would not match session information associated with a third proxy session.   
     
     
         4 . The method of  claim 1 , wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session. 
     
     
         5 . The method of  claim 1 , wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device. 
     
     
         6 . The method of  claim 1 , further comprising:
 storing the session information associated with the first proxy session.   
     
     
         7 . The method of  claim 1 , wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session. 
     
     
         8 . A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
 one or more instructions that, when executed by one or more processors of a proxy device, cause the proxy device to:
 allocate a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and 
 initiate the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port, 
 wherein the source port of the first proxy session is one of:
 the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or 
 a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session. 
 
   
     
     
         9 . The non-transitory computer-readable medium of  claim 8 , wherein the one or more instructions further cause the proxy device to:
 store mapping information that associates the first proxy session with the client session.   
     
     
         10 . The non-transitory computer-readable medium of  claim 8 , wherein the one or more instructions further cause the proxy device to:
 allocate the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and   determine that the session information associated with the first proxy session would not match session information associated with a third proxy session.   
     
     
         11 . The non-transitory computer-readable medium of  claim 8 , wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session. 
     
     
         12 . The non-transitory computer-readable medium of  claim 8 , wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device. 
     
     
         13 . The non-transitory computer-readable medium of  claim 8 , wherein the one or more instructions further cause the proxy device to:
 store the session information associated with the first proxy session.   
     
     
         14 . The non-transitory computer-readable medium of  claim 8 , wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session. 
     
     
         15 . A proxy device, comprising:
 one or more memories; and   one or more processors to:
 allocate a first port of the proxy device as a source port of a first proxy session for a client session associated with a client device and a destination device; and 
 initiate the first proxy session after determining whether session information associated with the first proxy session would match session information associated with a second proxy session allocated to the first port, 
 wherein the source port of the first proxy session is one of:
 the first port of the proxy device based on a determination that the session information associated with the first proxy session would not match the session information associated with the second proxy session, or 
 a second port of the proxy device based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session. 
 
   
     
     
         16 . The proxy device of  claim 15 , wherein the one or more processors are further to:
 store mapping information that associates the first proxy session with the client session.   
     
     
         17 . The proxy device of  claim 15 , wherein the one or more processors are further to:
 allocate the second port of the proxy device as the source port of the first proxy session based on a determination that the session information associated with the first proxy session would match the session information associated with the second proxy session; and   determine that the session information associated with the first proxy session would not match session information associated with a third proxy session.   
     
     
         18 . The proxy device of  claim 15 , wherein the session information associated with the first proxy session indicates a source address of the first proxy session, the source port of the first proxy session, a destination address of the first proxy session, a destination port of the first proxy session, and a protocol associated with the first proxy session. 
     
     
         19 . The proxy device of  claim 15 , wherein a source socket of the first proxy session matches a source socket of one or more other proxy sessions initiated by the proxy device. 
     
     
         20 . The proxy device of  claim 15 , wherein the session information associated with the first proxy session comprises a first 5-tuple associated with the first proxy session and the session information associated with the second proxy session comprises a second 5-tuple associated with the second proxy session.