Network proxy layer for policy-based application proxies

• US 10,230,770 B2
• Filed: 12/02/2013
• Issued: 03/12/2019
• Est. Priority Date: 12/02/2013
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Xu, Feilong, Chao, Chih-Wei, Chen, Lee
• Primary Examiner(s): Vu, Viet D
• Application Number:
  US14/094,529
• Publication Number:
  US 20150156223A1
• Time in Patent Office: 1,926 Days
• Field of Search: None
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

A system and method for providing a network proxy layer are disclosed. The network proxy layer may receive a connection establishment event for a client connection of an application session and send the client connection event to an application proxy for the application session, the application proxy being associated with an application of a server. Upon establishment of the client connection, the network proxy layer may receive one or more data packets from the client connection. The network proxy layer may further receive a connection establishment event for a server connection of the application session of the server, and receive one or more data packets from the server connection.

Claims

1. A method for providing a network proxy layer, comprising:

receiving, by a service gateway, a connection establishment event for a client connection of an application session, the connection establishment event indicating that the client connection is established between the service gateway and a client, the client connection being established based on a request received from the client;

sending, by the service gateway, a client connection event to an application proxy for the application session upon receiving the connection establishment event for the client connection associated with the client, the application proxy being associated with an application of one or more of a plurality of servers, the client connection event including at least client data associated with the client, the application proxy storing the client data to a client transmit buffer based on the client connection event;

receiving, by the application proxy, one or more data packets from the client connection;

based on the client data the one or more data packets received from the client connection, and a server selection policy, selecting, by the application proxy, a server from the plurality of servers, the server being associated with server data;

storing, by the application proxy, the one or more data packets and the server data of the server selected by the application proxy to the client transmit buffer;

determining, by the service gateway, a presence of the one or more data packets in the client transmit buffer;

based on the determining, initiating, by the service gateway, establishing a server connection of the application session with the server based on the server data stored in the client transmit buffer;

receiving, by the service gateway, a server establishment event for the server connection of the application session to the server, the server establishment event indicating that the server connection is established between the service gateway and the server;

upon receiving the server establishment event, sending, by the service gateway, the one or more data packets to the server based on the server data stored in the client transmit buffer; and

receiving, by the application proxy, one or more data packets from the server connection.

2. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

sending a client data to the application proxy, the client data derived from the one or more data packets from the client connection.

3. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a security or service policy.

4. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a protocol format associated to the application proxy.

5. The method of claim 1, wherein the receiving the server establishment event for the server connection of the application session to the server comprises:

receiving a request for the server connection; and

establishing the server connection with the server upon receiving the request for the server connection.

6. The method of claim 5, wherein the receiving a request for the server connection comprises an address of the server.

7. The method of claim 6, wherein the establishing the server connection with the server upon receiving the request for the server connection is based on the address of the server.

8. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

sending a server data to the application proxy wherein the server data is derived from the one or more data packets from the server connection.

9. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a security or service policy.

10. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a protocol format associated to the application proxy.

11. The method of claim 1, further comprising:

receiving client transmit data from the application proxy; and

sending the client transmit data to the server connection.

12. The method of claim 11, wherein the client transmit data is sent to the server connection as one or more data packets.

13. The method of claim 1, further comprising:

receiving server transmit data from the application proxy; and

sending the server transmit data to the client connection.

14. The method of claim 13, wherein the server transmit data is sent to the client connection as one or more data packets.

15. The method of claim 1, wherein the client connection or the server connection is an TCP connection.

16. The method of claim 1, wherein the application is one of a TCP application, a secure TCP application, a HTTP application, a secure HTTP application, a SIP application, or a secure SIP application.

17. A non-transitory computer-readable storage medium having instructions stored thereon, the instructions being executable by one or more processors to perform a method for providing a network proxy layer, the method comprising:

receiving, by a service gateway, a connection establishment event for a client connection of an application session, the connection establishment event indicating that the client connection is established between the service gateway and a client, the client connection being established based on a request received from the client;

sending, by the service gateway, a client connection event to an application proxy for the application session upon receiving the connection establishment event for the client connection associated with the client, the application proxy being associated with an application of one or more of a plurality of servers, the client connection event including at least client data associated with the client, the application proxy storing the client data to a client transmit buffer based on the client connection event;

receiving, by the application proxy, one or more data packets from the client connection;

based on the client data, the one or more data packets received from the client connection, and a server selection policy, selecting, by the application proxy, a server from the plurality of servers, the server being associated with server data;

storing, by the application proxy, the one or more data packets and the server data of the server selected by the application proxy to the client transmit buffer;

determining, by the service gateway, a presence of the one or more data packets in the client transmit buffer;

based on the determining, initiating, by the service gateway, establishing a server connection of the application session with the server based on the server data stored in the client transmit buffer;

receiving, by the service gateway, a server establishment event for the server connection of the application session to the server, the server establishment event indicating that the server connection is established between the service gateway and the server;

upon receiving the server establishment event, sending, by the service gateway, the one or more data packets to the server based on the server data stored in the client transmit buffer; and

receiving, by the application proxy, one or more data packets from the server connection.

18. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

sending a client data to the application proxy, the client data derived from the one or more data packets from the client connection.

19. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a security or service policy.

20. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a protocol format associated to the application proxy.

21. The non-transitory computer-readable storage medium of claim 17, wherein the receiving the server establishment event for the server connection of the application session to the server comprises:

receiving a request for the server connection; and

establishing the server connection with the server upon receiving the request for the server connection.

22. The non-transitory computer-readable storage medium of claim 21, wherein the receiving a request for the server connection comprises an address of the server.

23. The non-transitory computer-readable storage medium of claim 22, wherein the establishing the server connection with the server upon receiving the request for the server connection is based on the address of the server.

24. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

sending a server data to the application proxy wherein the server data is derived from the one or more data packets from the server connection.

25. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a security or service policy.

26. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a protocol format associated to the application proxy.

27. The non-transitory computer-readable storage medium of claim 17, further comprising:

receiving client transmit data from the application proxy; and

sending the client transmit data to the server connection.

28. The non-transitory computer-readable storage medium of claim 27, wherein the client transmit data is sent to the server connection as one or more data packets.

29. The non-transitory computer-readable storage medium of claim 17, further comprising:

receiving server transmit data from the application proxy; and

sending the server transmit data to the client connection.

30. The non-transitory computer-readable storage medium of claim 29, wherein the server transmit data is sent to the client connection as one or more data packets.

31. The non-transitory computer-readable storage medium of claim 17, wherein the client connection or the server connection is an TCP connection.

32. The non-transitory computer-readable storage medium of claim 17, wherein the application is one of a TCP application, a secure TCP application, a HTTP application, a secure HTTP application, a SIP application, or a secure SIP application.