Hybrid approach for performance enhancing proxies

• US 10,341,449 B2
• Filed: 04/28/2016
• Issued: 07/02/2019
• Est. Priority Date: 06/24/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kashyap, Vivek, Kravetz, Michael J., Ma, Xiuling, Nahum, Erich M.
• Primary Examiner(s): Phillips, Hassan A
• Assistant Examiner(s): Jones, Prenell
• Application Number:
  US15/140,875
• Publication Number:
  US 20160241662A1
• Time in Patent Office: 1,160 Days
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields

Abstract

There are provided a transparent performance enhancing proxy, a method for operating a transparent performance enhancing proxy between a source device and a destination device, and corresponding computer program product. The method includes preserving, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device. The method further includes during a transmission control protocol connection setup phase for the packet, preserving transmission control protocol connection semantics. The method also includes during a transmission control protocol data transfer phase for the packet, running a transmission control protocol by masquerading as the source device to the destination device and masquerading as the destination device to the source device to transmit the packet to the destination device with the preserved packet header information.

Claims

1. A method for operating a transparent performance enhancing proxy between a source device and a destination device, comprising:

preserving, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device;

during a transmission control protocol connection setup phase for the packet, preserving transmission control protocol connection semantics; and

after establishment of a connection between the source device and the destination device during the transmission control protocol connection setup phase as indicated by the transparent performance enhancing proxy receiving a synchronization acknowledgment from the destination device, locally terminating the connection at the transparent performance enhancing proxy and creating a connection from the source device to the transparent performance enhancing proxy and a connection from the transparent performance enhancing proxy to the source device.

2. The method of claim 1, wherein the packet header information that is preserved without translation comprises, at least one of:

for transmission control protocol communication of the packet, at least one of a transmission control protocol port number, a transmission control protocol sequence number, and a transmission control protocol header option;

for Internet protocol communication of the packet, at least one of an Internet Protocol address, an Internet Protocol hop limit, an Internet Protocol Time To Live, an Internet Protocol Type of Service, and an Explicit Congestion Notification; and

for media access control communication of the packet, at least one of a media access control address and a virtual local area network tag.

3. The method of claim 1, wherein the packet header information that is preserved without translation comprises all information specified in all mandatory fields of the header.

4. The method of claim 3, wherein the packet header information that is preserved without translation further comprises all information specified in at least some options fields of the header.

5. The method of claim 1, wherein the transmission control protocol connection semantics are preserved for the connection setup phase by waiting for a Synchronize Acknowledge to return from the destination device and preventing termination of a connection between the source device and the destination device until both the source device and the destination device have completed their respective connection establishment sequences for the connection.

6. The method of claim 1, further comprising preserving transmission control protocol connection semantics for a connection termination phase for the packet by closing a connection between the source device and the transparent performance enhancing proxy, closing a connection between the transparent performance enhancing proxy and the destination device, and releasing all allocated resources for the connections.

7. The method of claim 1, further comprising:

responsive to receiving the packet from the source device, creating a copy of the packet, caching the copy of the packet, and transmitting the copy of the packet to the destination device;

responsive to receiving an acknowledgement for the packet from the source device, destroying the copy of the packet that has been cached; and

responsive to a detection of packet loss relating to the packet, retransmitting the copy of the packet that has been cached.

8. A computer program product for operating a transparent performance enhancing proxy, the computer program product comprising a computer readable non-transitory storage medium having program instructions embodied therewith, the program instructions executable by a processor comprised in the transparent performance enhancing proxy to cause the transparent performance enhancing proxy to:

preserve, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device;

during a transmission control protocol connection setup phase for the packet, preserve transmission control protocol connection semantics; and

after establishment of a connection between the source device and the destination device during the transmission control protocol connection setup phase as indicated by the transparent performance enhancing proxy receiving a synchronization acknowledgment from the destination device, locally terminating the connection at the transparent performance enhancing proxy and creating a connection from the source device to the transparent performance enhancing proxy and a connection from the transparent performance enhancing proxy to the source device.

9. The computer program product of claim 8, wherein the packet header information that is preserved without translation comprises, at least one of:

for transmission control protocol communication of the packet, at least one of a transmission control protocol port number, a transmission control protocol sequence number, and a transmission control protocol header option;

for Internet protocol communication of the packet, at least one of an Internet Protocol address, an Internet Protocol hop limit, an Internet Protocol Time To Live, an Internet Protocol Type of Service, and an Explicit Congestion Notification; and

for media access control communication of the packet, at least one of a media access control address and a virtual local area network tag.

10. The computer program product of claim 8, wherein the transmission control protocol connection semantics are preserved for the connection setup phase by waiting for a Synchronize Acknowledge to return from the destination device and preventing termination of a connection between the source device and the destination device until both the source device and the destination device have completed their respective connection establishment sequences for the connection.

11. The computer program product of claim 8, further comprising preserving transmission control protocol connection semantics for a connection termination phase for the packet by closing a connection between the source device and the transparent performance enhancing proxy, closing a connection between the transparent performance enhancing proxy and the destination device, and releasing all allocated resources for the connections.

12. A transparent performance enhancing proxy for disposing between a source device and a destination device, the proxy comprising:

a processor for preserving, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device; and

a memory for storing a copy of the packet,

wherein during a transmission control protocol connection setup phase for the packet, the processor preserves transmission control protocol connection semantics, and after establishment of a connection between the source device and the destination device during the transmission control protocol connection setup phase as indicated by the transparent performance enhancing proxy receiving a synchronization acknowledgment from the destination device, locally terminating the connection at the transparent performance enhancing proxy,

wherein during a transmission control protocol data transfer phase for the packet, the processor running a transmission control protocol by masquerading as the source device to the destination device and masquerading as the destination device to the source device to transmit the packet to the destination device with the preserved packet header information.

13. The transparent performance enhancing proxy of claim 12, wherein the transmission control protocol connection semantics are preserved for the connection setup phase by waiting for a Synchronize Acknowledge to return from the destination device and preventing termination of a connection between the source device and the destination device until both the source device and the destination device have completed their respective connection establishment sequences for the connection there between.