Method and apparatus for improving the operation of an application layer proxy

• US 20020078135A1
• Filed: 03/15/2001
• Published: 06/20/2002
• Est. Priority Date: 03/15/2001
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Venkatsubra, Venkat
• Application Number:
  US09/810,033
• Publication Number:
  US 20020078135A1
• Time in Patent Office: Days
• US Class Current: 709/202
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/2871 Implementation details of single intermediate entities
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures

Abstract

An apparatus and method for improving the operation of an application layer proxy by minimizing sources of delay in moving data from one TCP/IP connection to the other are provided. The apparatus and method improve the operation of the application layer proxy by performing the movement of data packets from one TCP/IP connection to the other in the kernel of the application layer proxy. The movement of data packets is performed by moving address pointers to the data packets from a first TCP/IP connection receive buffer to a send buffer of a second TCP/IP connection. In this way, the context switching required by the prior art is eliminated and traversal of the TCP/IP stack is not necessary. Furthermore, two separate TCP connections are maintained and thus, the features used for the connections are not limited by the features supported by the end points. Features supported by the application layer proxy may be used in the TCP connections.

Claims

1. A method of moving data from a first communication connection to a second communication connection in an application layer proxy, comprising:

receiving the data in a receive buffer of the first communication connection in the application layer proxy;

generating an address pointer to the data in the receive buffer; and

storing the address pointer in a send queue of the second communication connection in the application layer proxy to thereby move the data from the first communication connection to the second communication connection.

2. The method of claim 1, wherein the generating step is performed within a kernel of the application layer proxy.

3. The method of claim 1, wherein at least one of the first communication connection and the second communication connection is a TCP/IP socket communication connection.

4. The method of claim 1, wherein the first communication connection includes a first kernel socket and the second communication connection includes a second kernel socket.

5. The method of claim 1, wherein the step of generating an address pointer is performed at a TCP layer of a TCP/IP stack of the application layer proxy.

6. The method of claim 1, wherein one of the first communication connection and the second communication connection is between the application layer proxy and a client, and wherein the other of the first communication connection and the second communication connection is between the application layer proxy and a server.

7. The method of claim 2, wherein the steps of generating an address pointer to the data and storing the address pointer in a send queue of the second communication connection in the application layer proxy are performed using a socket system call causing a buffer of the first communication connection to point to a buffer of the second communication connection and the buffer of the second communication connection to point to the buffer of the first communication connection.

8. The method of claim 1, wherein generating an address pointer to the data includes populating a field in a connection control block for the second communication connection to point to a connection control block for the first communication connection.

9. The method of claim 1, wherein the method of moving the data from the first communication connection to the second communication connection is performed without context switching.

10. The method of claim 1, wherein the method of moving the data from the first communication connection to the second communication connection is performed without traversing a boundary between kernel space and application space.

11. The method of claim 1, further comprising:

transmitting the data using the second communication connection by accessing the data identified by the address pointer in the send buffer of the second communication connection.

13. The apparatus of claim 12, wherein the means for generating includes a processor that executes a kernel socket system call.

14. The apparatus of claim 12, wherein at least one of the first communication connection and the second communication connection is a TCP/IP socket communication connection.

15. The apparatus of claim 12, wherein the means for generating an address pointer generates the address pointer at a TCP layer of a TCP/IP stack of the application layer proxy.

16. The apparatus of claim 13, wherein the kernel socket system call causes a buffer associated with the first communication connection to point to a buffer associated with the second communication connection and the buffer associated with the second communication connection to point to the buffer associated with the first communication connection.

17. The apparatus of claim 12, wherein the means for generating an address pointer to the data includes populating a field in a connection control block for the second communication connection to point to a connection control block for the first communication connection.

18. The apparatus of claim 12, further comprising:

means for transmitting the data using the second communication connection by accessing the data identified by the address pointer in the send buffer of the second communication connection.

20. The computer program product of claim 19, wherein the second instructions are executed within a kernel of the application layer proxy.

21. The computer program product of claim 19, wherein at least one of the first communication connection and the second communication connection is a TCP/IP socket communication connection.

22. The computer program product of claim 19, wherein the second instructions for generating an address pointer are executed at a TCP layer of a TCP/IP stack of the application layer proxy.

23. The computer program product of claim 19, wherein the second instructions include a socket system call that causes a buffer associated with the first communication connection to point to a buffer associated with the second communication connection and the buffer associated with the second communication connection to point to the buffer associated with the first communication connection.

24. The computer program product of claim 19, wherein the second instructions includes instructions for populating a field in a connection control block for the second communication connection to point to a connection control block for the first communication connection.

12. An apparatus for moving data from a first communication connection to a second communication connection in an application layer proxy, comprising:

means for receiving the data in a receive buffer of the first communication connection in the application layer proxy;

means for generating an address pointer to the data in the receive buffer; and

means for storing the address pointer in a send queue of the second communication connection in the application layer proxy to thereby move the data from the first communication connection to the second communication connection.

19. A computer program product in a computer readable medium for moving data from a first communication connection to a second communication connection in an application layer proxy, comprising:

first instructions for receiving the data in a receive buffer of the first communication connection in the application layer proxy;

second instructions for generating an address pointer to the data in the receive buffer; and

third instructions for storing the address pointer in a send queue of the second communication connection in the application layer proxy to thereby move the data from the first communication connection to the second communication connection.