In-kernel content-aware service differentiation
First Claim
1. A method comprising:
- differentiating at least one service class in a kernel to perform service differentiation based on content in at least one data packet, including the steps of;
capturing said at least one data packet until a complete application header is detected;
parsing said complete application header to determine at least one application tag;
matching said at least one application tag to at least one matching rule;
determining a presence of at least one match with said at least one matching rule; and
performing service differentiation action based on said at least one matching rule.
1 Assignment
0 Petitions
Accused Products
Abstract
The increasing number of Internet users and innovative new services such as e-commerce are placing new demands on Web servers. It is becoming essential for Web servers to provide performance isolation, have fast recovery times, and provide continuous service during overload at least to preferred customers. The invention describes a kernel-based architecture for content-aware service differentiation that protects Web servers against overload by controlling the amount and rate of work entering the system. We have invented a mechanism that provides admission control and service differentiation based on connection and application level information. The application header-based connection control uses application-level information (such as URIs and cookies for HTTP) to define different service differentiation actions. The present invention provides the kernel mechanisms that are more efficient and scalable than application level controls implemented in current Web servers.
111 Citations
21 Claims
-
1. A method comprising:
differentiating at least one service class in a kernel to perform service differentiation based on content in at least one data packet, including the steps of;
capturing said at least one data packet until a complete application header is detected;
parsing said complete application header to determine at least one application tag;
matching said at least one application tag to at least one matching rule;
determining a presence of at least one match with said at least one matching rule; and
performing service differentiation action based on said at least one matching rule. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 17, 18, 19, 20)
-
14. An apparatus comprising a service differentiation module including:
-
a parser to parse a client Web request;
a classifier to classify the request based on application headers and assigning a request class within a kernel;
a selector to determine an action rule based on the request class; and
a performer to apply the action rule based on the request class.
-
-
15. An apparatus comprising a policy agent, said policy agent including:
-
a communicator to communicate from a user space to a kernel with an application interface;
an initializer to instantiate service differentiation rules for an application tag within the kernel which include classification and action rules; and
a manager to delete and update rules on a user request. - View Dependent Claims (21)
-
-
16. A method comprising:
forming a rule, including the steps of;
communicating from a user space to a kernel with an application interface;
instantiating service differentiation rules for an application tag within the kernel which include classification and action rules; and
deleting and adding rules based upon a user request.
Specification