Real-time call tracing in a service-oriented system

• US 10,554,701 B1
• Filed: 04/09/2018
• Issued: 02/04/2020
• Est. Priority Date: 04/09/2018
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Decker, Michael David, Fernandes, Aaron Ben, Goldberg, Anton Vladilenovich
• Primary Examiner(s): Ho, Duc C
• Application Number:
  US15/948,993
• Time in Patent Office: 666 Days
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 47/801 Real time traffic
• CPC Class Codes: H04L 65/401 wherein the services involve a main real-time session and one or more additional parallel real-time or time sensitive sessions, e.g. white board sharing or spawning of a subconference
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods, systems, and computer-readable media for real-time call tracing in a service-oriented system are disclosed. A request comprising a trace signature is received at a service in a service-oriented system. The trace signature comprises a representation of one or more upstream services in an upstream call path associated with the request. Based at least in part on the trace signature, the service determines one or more actions to perform with respect to the request.

Claims

1. A system, comprising:

a plurality of computing devices configured to implement a service-oriented system, wherein the service-oriented system comprises a plurality of services including a first service, a second service, and a third service, and wherein the computing devices are configured to;

generate, at the first service, a first trace signature based at least in part on an identifier of the first service, wherein the first trace signature comprises data identifying the first service;

receive, at the second service from the first service, a first request comprising the first trace signature;

generate, at the second service, a second trace signature based at least in part on the first trace signature and an identifier of the second service, wherein the second trace signature comprises data identifying the first service and the second service;

receive, at the third service from the second service, a second request comprising the second trace signature; and

determine, at the third service, whether to perform or discard the second request based at least in part on the second trace signature, wherein the second trace signature represents an upstream call path associated with the second request.

2. The system as recited in claim 1, wherein determining whether to perform or discard requests at the third service is enabled based at least in part on the third service exceeding a threshold quantity of requests.

3. The system as recited in claim 1, wherein the first trace signature is generated using a hash function at least on the identifier of the first service, and wherein the second trace signature is generated using the hash function at least on the first trace signature and the identifier of the second service.

4. The system as recited in claim 1, wherein the third service determines whether to perform or discard the second request based at least in part on a Bloom filter, wherein the Bloom filter comprises a representation of a plurality of request tiers for call paths corresponding to trace signatures, and wherein the Bloom filter is received at the third service prior to the second request.

5. A computer-implemented method, comprising:

receiving, at a service in a service-oriented system, a request comprising a trace signature, wherein the trace signature comprises a representation of one or more upstream services in an upstream call path associated with the request; and

determining, based at least in part on the trace signature, whether the service is to perform the request or discard the request.

6. The method as recited in claim 5, wherein the upstream call path represented by the trace signature is associated with a lower priority, and wherein determining comprises determining to discard the request.

7. The method as recited in claim 5, wherein the upstream call path represented by the trace signature is associated with a higher priority, and wherein determining comprises determining to perform the request.

8. The method as recited in claim 5, wherein the determining is further based at least in part on the service exceeding a threshold quantity of requests.

9. The method as recited in claim 5, further comprising:

generating, at the service, a modified trace signature based at least in part on the trace signature and an identifier of the service; and

sending, from the service to a downstream service, an additional request comprising the modified trace signature, wherein the modified trace signature comprises a representation of the service and the one or more upstream services in an upstream call path associated with the additional request.

10. The method as recited in claim 9, wherein the trace signature is generated using a hash function, and wherein the modified trace signature is generated using the hash function on the trace signature and the identifier of the service.

11. The method as recited in claim 9, wherein the modified trace signature is not larger in size than the trace signature.

12. The method as recited in claim 5, wherein the determining comprises:

analyzing the trace signature using a Bloom filter, wherein the Bloom filter comprises a representation of a plurality of request tiers for call paths corresponding to trace signatures, and wherein the Bloom filter is received at the service prior to the request.

13. The method as recited in claim 5, wherein the trace signature comprises a bitmap, wherein individual bits in the bitmap represent respective services in the service-oriented system, and wherein the bitmap indicates a membership of the one or more upstream services in the upstream call path.

14. A computer-readable storage medium storing program instructions computer-executable to perform:

receiving, at a service in a service-oriented system, a request comprising a trace signature, wherein the trace signature comprises a representation of one or more upstream services in an upstream call path associated with the request; and

determining, by the service based at least in part on the trace signature, whether the service is to perform the request or discard the request.

15. The computer-readable storage medium as recited in claim 14, wherein the upstream call path represented by the trace signature is associated with a lower priority, and wherein the determining further comprises determining to delay satisfaction of the request.

16. The computer-readable storage medium as recited in claim 14, wherein the determining further comprises determining whether to allow or deny access to restricted information associated with satisfaction of the request.

17. The computer-readable storage medium as recited in claim 14, wherein the determining further comprises determining whether to raise raising an alarm associated with the request.

18. The computer-readable storage medium as recited in claim 14, wherein the program instructions are further computer-executable to perform:

generating, at the service, a modified trace signature based at least in part on the trace signature and an identifier of the service; and

sending, from the service to a downstream service, an additional request comprising the modified trace signature, wherein the modified trace signature comprises a representation of the service and the one or more upstream services in an upstream call path associated with the additional request.

19. The computer-readable storage medium as recited in claim 18, wherein the trace signature is generated using a hash function, and wherein the modified trace signature is generated using the hash function on the trace signature and the identifier of the service.

20. The computer-readable storage medium as recited in claim 14, wherein the determining further comprises:

analyzing the trace signature using a Bloom filter, wherein the Bloom filter comprises a representation of a plurality of request tiers for call paths corresponding to trace signatures, and wherein the Bloom filter is received at the service prior to the request.