Externally initiated application session endpoint migration

• US 10,291,723 B2
• Filed: 12/21/2016
• Issued: 05/14/2019
• Est. Priority Date: 01/24/2014
• Status: Active Grant

• Current Assignee: NetApp, Inc.
• Original Assignee: NetApp, Inc.
• Inventors: Eggert, Lars R., Muley, Naman G., Patil, Preetam
• Primary Examiner(s): Boutah, Alina A
• Application Number:
  US15/386,661
• Publication Number:
  US 20170104830A1
• Time in Patent Office: 874 Days
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 67/147 Signalling methods or messages providing extensions to protocols defined by standardisation
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

In storage networks (e.g., SAN and NAS), various reasons can arise for migrating an application layer communication session endpoint to a different host. To achieve scalability and robustness, the migration can be enacted externally and carried out at a middlebox at the transport layer. When a migration is triggered to migrate an application layer communication session endpoint from a host A to a host B, the middlebox coordinates network address translation with a transport protocol reset mechanism to switch the connection to host B and close the connection on host A with minimal disruption to the non-migrating application layer communication session endpoint using the connection. At the application layer, the non-migrating application layer communication session endpoint will initiate a new connection in response to detecting the reset, and retry any operation that was aborted as a result of the connection switch.

Claims

1. A method comprising:

configuring, by a controller, a first network address translation rule to translate a first address of a first server to a second address of a second server for protocol data units being received at the first server from a client device;

configuring, by the controller, a second network address translation rule to translate the second address of the second server to the first address of the first server for protocol data units being transmitted to the client device from the second server; and

migrating, by the controller, an endpoint of an application communication session from the first server to the second server using the first and second network address translation rules, the migrating comprising;

transmitting, by the controller, an acknowledgement message to the first server to appear as though the client device sent the acknowledgment message, the acknowledgement message comprising an acknowledgement identifier not expected by the first server; and

transmitting, by the controller, a reset message to the first server to appear as though the client device sent the reset message, wherein the reset message is created with a sequence field set to a second acknowledgment identifier indicated in a second acknowledgement message received from the first server.

2. The method of claim 1, wherein the acknowledgement identifier comprises an acknowledgement number.

3. The method of claim 1, comprising:

transmitting a second reset message to the client device to appear as though the first server sent the second reset message, the second reset message comprising a second sequence field set to a sequence number indicated in the acknowledgement message from the first server.

4. The method of claim 3, comprising creating the second reset message with a field set to indicate the first server as a source of the second reset message.

5. The method of claim 1, comprising creating the acknowledgement message with a field set to indicate the client device as a source of the acknowledgement message.

6. The method of claim 1, wherein the controller comprises software executing on a device.

7. The method of claim 1, wherein

configuring the first network address translation rule comprises configuring the first network address translation rule to translate a first port of the first server to a second port of the second server.

8. The method of claim 2, wherein the acknowledgement number is outside of a range of acknowledgement numbers expected by the first server.

9. A non-transitory computer readable storage medium having stored thereon instructions for performing a method comprising machine executable code which when executed by at least one machine, causes the machine to:

configure, by a controller, a first network address translation rule to translate a first address of a first server to a second address of a second server for protocol data units being received at the first server from a client device;

configure, by the controller, a second network address translation rule to translate the second address of the second server to the first address of the first server for protocol data units being transmitted to the client device from the second server; and

migrate, by the controller, an endpoint of an application communication session from the first server to the second server using the first translation rule and the second translation rule, comprising;

transmitting, by the controller, an acknowledgement message to the first server to appear as though the client device sent the acknowledgment message, the acknowledgement message comprising an acknowledgement identifier not expected by the first server; and

transmitting, by the controller, a reset message to the first server to appear as though the client device sent the reset message, wherein the reset message is created with a sequence field set to a second acknowledgment identifier indicated in a second acknowledgement message received from the first server.

10. The non-transitory computer readable storage medium of claim 9, wherein the acknowledgement message and the second acknowledgment message are in accordance with a transmission control protocol.

11. The non-transitory computer readable storage medium of claim 9, wherein the machine executable code causes the machine to:

transmit a second reset message to the client device to appear as though the first server sent the second reset message as if from the first host, the second reset message comprising a second sequence field set to a sequence number indicated in the acknowledgement message from the first server.

12. The non-transitory computer readable storage medium of claim 11, wherein the machine executable code causes the machine to create the second reset message with a field set to indicate the first server as a source of the second reset message.

13. The non-transitory computer readable storage medium of claim 9, wherein the machine executable code causes the machine to create the acknowledgement message with a field set to indicate the client device as a source of the acknowledgement message.

14. The non-transitory computer readable storage medium of claim 9, wherein the machine executable code causes the machine to:

receive a request for migration, the request specifying a transport layer connection.

15. The non-transitory computer readable storage medium of claim 9, wherein the machine executable code causes the machine to generate a number, as the acknowledgement identifier, outside of a window associated with a transport layer connection.

16. A computing device comprising:

a memory comprising machine executable code for performing a method; and

a processor coupled to the memory, the processor configured to execute the machine executable code to cause the processor to;

configure, by the computing device, a first network address translation rule to translate a first address of a first server to a second address of a second server for protocol data units being received at the first server from a client device;

configure, by the computing device, a second network address translation rule to translate the second address of the second server to the first address of the first server for protocol data units being transmitted to the client device from the second server; and

migrate, by the computing device, an endpoint of an application communication session from the first server to the second server using the first translation rule and the second translation rule, comprising;

transmitting, by the computing device, an acknowledgement message to the first server to appear as though the client device sent the acknowledgment message, the acknowledgement message comprising an acknowledgement identifier not expected by the first server; and

transmitting, by the computing device, a reset message to the first server to appear as though the client device sent the reset message, wherein the reset message is created with a sequence field set to a second acknowledgment identifier indicated in a second acknowledgement message received from the first server.

17. The computing device of claim 16, wherein the machine executable code to cause the processor to:

remove the first network address translation rule and the second network address translation rule based upon a determination that the endpoint is to be migrated from the second server back to the first server.

18. The computing device of claim 17, wherein the machine executable code to cause the processor to transmit a second reset message to the client device to appear as though the first server sent the second reset message, the second reset message comprising a second sequence field set to a sequence number indicated in the acknowledgement message from the first server.

19. The computing device of claim 16, wherein the machine executable code to cause the processor to create the acknowledgement message with a field set to indicate the client device as a source of the acknowledgement message.

20. The computing device of claim 16, wherein the machine executable code to cause the processor to generate a number, as the acknowledgment identifier number, outside of a window associated with a transport layer connection.