Method and system for controlling network traffic to a network computer

• US 20020138643A1
• Filed: 10/18/2001
• Published: 09/26/2002
• Est. Priority Date: 10/19/2000
• Status: Abandoned Application

• Current Assignee: Board of Regents of the University of Michigan (University of Michigan), University of Michigan
• Original Assignee: Board of Regents of the University of Michigan (University of Michigan)
• Inventors: Shin, Kang G., Reumann, John, Jamjoom, Hani
• Application Number:
  US09/982,612
• Publication Number:
  US 20020138643A1
• Time in Patent Office: Days
• US Class Current: 709/232
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/11 Identifying congestion
• CPC Class Codes: H04L 47/12 Avoiding congestion; Recovering from congestion
• CPC Class Codes: H04L 47/19 at layers above the network layer network arrangements for networked applications for scheduling or organising the servicing of application requests H04L67/60
• CPC Class Codes: H04L 47/215 using token-bucket
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/24 Traffic characterised by specific attributes, e.g. priority or QoS
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/32 by discarding or delaying data units, e.g. packets or frames
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

A method and system for controlling network traffic to a network computer such as a server is provided wherein such control is provided based on a measured capacity of the server to service the network traffic and rule data which represents different policies for servicing the network traffic. A load-controller of the system installs more or less restrictive packet or request filtering policies based on the capacity of the server to throttle the traffic to the server. The method and system are sensitive to the actual capacity of the server by adopting this adaptive traffic-shaping feature instead of using rigid policies to control resource usage on the server.

Claims

1. A method for controlling network traffic to a network computer which provides network computer services, the method comprising:

measuring capacity of the network computer to service the network traffic to obtain a signal;

providing a set of rule data which represents different policies for servicing the network traffic;

selecting a subset of the rule data based on the signal; and

throttling the network traffic to the network computer based on the selected subset of the rule data wherein services provided by the network computer are optimized without overloading the network computer.

2. The method as claimed in claim 1 wherein the network computer is a server and wherein the network traffic includes requests for service from network clients over the network.

3. The method as claimed in claim 2 wherein the network is the Internet and the server is an Internet server.

4. The method as claimed in claim 1 wherein the network traffic includes denial of service attacks.

5. The method as claimed in claim 1 further comprising organizing the set of rule data in at least one multi-dimensional coordinate system.

6. The method as claimed in claim 5 wherein the capacity of the network computer includes load components or load component indices and wherein the dimensions of the at least one multi-dimensional coordinate system corresponds to the load components or load component indices.

7. The method as claimed in claim 1 further comprising the step of classifying network traffic to the network computer to obtain a plurality of traffic classifications and wherein the step of throttling is based on the plurality of traffic classifications.

8. The method as claimed in claim 1 wherein the selected subset of rule data represents quality of service differentiations and wherein the network traffic is throttled so that the network computer provides quality of service differentiation.

9. The method as claimed in claim 1 wherein the step of throttling prevents substantially all of the network traffic from reaching the network computer.

10. The method as claimed in claim I wherein the step of throttling allows substantially all of the -network traffic to reach the network computer.

11. A system for controlling network traffic to a network computer which provides network computer services, the system comprising:

a monitor for measuring capacity of the network computer to service the network traffic to obtain a signal;

a storage for storing a set of rule data which represents different policies for servicing the network traffic;

means for selecting a subset of the rule data based on the signal; and

a controller for controlling the network traffic to the network computer based on the selected subset of rule data wherein the services provided by the network computer are optimized without overloading the network computer.

12. The system as claimed in claim 11 wherein the network computer is a server and wherein the network traffic includes requests for service from network clients over the network.

13. The system as claimed in claim 12 wherein the network is the Internet and the server is an Internet server.

14. The system as claimed in claim 11 wherein the network traffic includes denial of service attacks.

15. The system as claimed in claim 11 wherein the set of rule data is stored in at least one multi-dimensional coordinate system.

16. The system as claimed in claim 15 wherein the capacity of the network computer includes local components or local component indices and wherein the dimensions of the at least one multi-dimensional coordinate system corresponds to the load components or load component indices.

17. The system as claimed in claim 11 further comprising a classifier for classifying network traffic to the network computer to obtain a plurality of traffic classifications and wherein the controller controls the network traffic based on the plurality of traffic classifications.

18. The system as claimed in claim 11 wherein the selected subset of rule data represents quality of service differentiations and wherein the network traffic is throttled so that the network computer provides quality of service differentiation.

19. The system as claimed in claim 11 wherein the controller prevents substantially all of the network traffic from reaching the network computer.

20. The system as claimed in claim 11 wherein the controller allows substantially all of the network traffic to reach the network computer.