Network service architecture

• US 20040193677A1
• Filed: 03/24/2003
• Published: 09/30/2004
• Est. Priority Date: 03/24/2003
• Status: Abandoned Application

• Current Assignee: Eden Shochat, Geva Solomonovich, Shaul Dar
• Original Assignee: Eden Shochat, Geva Solomonovich, Shaul Dar
• Inventors: Dar, Shaul, Solomonovich, Geva, Shochat, Eden
• Application Number:
  US10/395,801
• Publication Number:
  US 20040193677A1
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 61/2539 Hiding addresses; Keeping addresses anonymous
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1025 Dynamic adaptation of the criteria on which the server selection is based
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A system for use in a network that includes a plurality of clients and a plurality of servers configured to provide services includes at least one interface configured to communicate with the clients and the servers, a memory that contains computer-readable and computer-executable instructions, and a processor coupled to the at least one interface and to the memory and configured to read and execute the instructions, the instructions being configured to cause the processor to: analyze a client-service communication, received from one of the clients by the at least one interface, for a client identifier associated with the client originating the client-service communication and for a virtual service identifier associated with an intended service of the client-service communication; perform network address translation on the client-service communication to produce a modified client-service communication, the translation including translating the virtual service identifier to an actual service identifier of the service and translating the client identifier to a virtual source identifier; and transmit the modified client-service communication via the at least one interface toward the intended service.

Claims

1. A system for use in a network that includes a plurality of clients and a plurality of servers configured to provide services, the system comprising:

at least one interface configured to communicate with the clients and the servers;

a memory that contains computer-readable and computer-executable instructions; and

a processor coupled to the at least one interface and to the memory and configured to read and execute the instructions, the instructions being configured to cause the processor to;

analyze a client-service communication, received from one of the clients by the at least one interface, for a client identifier associated with the client originating the client-service communication and for a virtual service identifier associated with an intended service of the client-service communication;

perform network address translation on the client-service communication to produce a modified client-service communication, the translation including translating the virtual service identifier to an actual service identifier of the service and translating the client identifier to a virtual source identifier; and

transmit the modified client-service communication via the at least one interface toward the intended service.

2. The system of claim 1 wherein the virtual service identifier includes a virtual address and the actual service identifier includes an actual address and the instructions are configured to cause the processor to determine the actual address associated with the virtual address and to transmit the modified client-service communication with a destination address being the determined actual address.

3. The system of claim 2 wherein the virtual service identifier includes a virtual port number and the actual service identifier includes an actual port number and the instructions are configured to cause the processor to determine the actual port number associated with the virtual address and the virtual port number and to transmit the modified client-server communication with a destination port number being the determined actual port number.

4. The system of claim 1 wherein the memory further contains a pool of virtual source identifiers and the translation includes selecting the virtual source identifier from the pool of virtual source identifiers.

5. The system of claim 4 wherein the virtual source identifiers include pool addresses and the instructions are configured to cause the processor to transmit the modified client-server communication with a pool address as at least a portion of the virtual source identifier.

6. The system of claim 4 wherein the instructions are configured to cause the processor to associate client source information from the incoming client-server communication with one of the pool identifiers.

7. The system of claim 1 wherein the instructions are further configured to cause the processor to:

analyze an incoming service-client communication, received from one of the servers by the at least one interface, for a virtual destination identifier and for a service source identifier associated with the server originating the server-client communication;

perform network address translation on the service-client communication to produce a modified service-client communication, the translation including translating the virtual destination identifier to the client identifier and translating the service source identifier to the virtual service identifier; and

transmit the modified server-client communication via the at least one interface toward the client.

8. The system of claim 7 wherein the memory further contains a pool of virtual source identifiers and the translation on the client-service communication includes selecting the virtual source identifier from the pool of virtual source identifiers and associating the client source identifier with the selected virtual source identifier and the translation on the service-client communication includes determining the client identifier by finding the identifier associated in the memory with the virtual destination identifier.

9. The system of claim 1 wherein the memory further contains stored relationships of virtual service identifiers and actual service identifiers and the instructions are configured to cause the processor to find one of the actual service identifiers that is associated with the virtual service identifier.

10. A method of conveying, via a network, communications between a client and a service, the method comprising:

receiving a client-to-service communication that is intended for the service;

determining, from the client-to-service communication, an actual client identifier of the client and a virtual service identifier associated with an intended service for the client-to-service communication;

producing a modified client-to-service communication by replacing the actual client identifier with a proxy source identifier and by replacing the virtual service identifier with an actual service identifier that is associated with the virtual service identifier; and

transmitting the modified client-to-service communication toward the intended destination service according to the actual service identifier.

11. The method of claim 10 wherein the client and service communicate in a communication session that includes a sequence of communications between the client and service, the method further comprising associating the proxy source identifier with the communication session.

12. The method of claim 11 wherein the actual source identifier includes a client address, the virtual service identifier includes a virtual address, the proxy source identifier includes a proxy address, the actual service identifier includes a server address, and the method further comprises storing the proxy address in association with the client address.

13. The method of claim 10 wherein the modified client-to-service communication is performed in a modification device and the client-to-service communication is a session-establishment communication, the method further comprising transmitting another communication from a source of the session-establishment communication to the service while bypassing the modification device.

14. The method of claim 10 wherein the client-to-service communication is a session-establishment communication, the method further comprising transmitting another communication from a source of the session-establishment communication to the service without replacing the actual client identifier.

15. The method of claim 10 further comprising:

receiving a server-to-client communication that is intended for the client;

determining, from the server-to-client communication, the actual service identifier and the proxy source identifier;

producing a modified server-to-client communication by replacing the actual service identifier with the virtual service identifier and by replacing the proxy source identifier with the actual client identifier; and

transmitting the modified server-to-client communication toward the client according to the actual client identifier.

16. The method of claim 10 further comprising selecting the proxy source identifier from a pool of identifiers.

17. The method of claim 16 further comprising associating the actual client identifier with the selected proxy source identifier.

18. The method of claim 17 further comprising associating a different actual client with the selected proxy source identifier.

19. A communication system comprising:

a plurality of clients;

a communication network coupled to the clients, with the clients are configured to communicate with the network;

a plurality of servers coupled to the network and configured to communicate with the network and to provide managed and unmanaged services; and

translation means for translating virtual service identifiers of communications from the clients to the servers requesting managed services to actual service identifiers that are associated with the requested managed services;

wherein communications from the clients to the servers requesting unmanaged services are communicated to the appropriate servers without conversion of virtual service identifiers to actual service identifiers.

20. The system of claim 19 wherein the translation means is configured to perform network address translation on the communications.

21. The system of claim 19 wherein the translation means is further for translating actual client identifiers of the communications from the clients to the servers requesting managed services to proxy source identifiers.

22. The system of claim 21 wherein the translation means is configured to select the proxy source identifier from a pool of identifiers and to associate a communication session between one of the clients and one of the services with the selected proxy source identifier.

23. The system of claim 22 wherein the translation means is for translating actual service identifiers of communications from the services to the clients responding regarding managed services to the associated virtual service identifiers and for translating selected proxy source identifiers in the communications from the services to the clients to the actual client identifiers associated with the communication sessions associated with the selected proxy source identifiers.

24. The system of claim 22 wherein the communication session is a first communication session and the translation means is configured to associate a second, different, communication session between one of the clients and one of the services with the selected proxy source identifier instead of the first communication session.

25. The system of claim 19 wherein the servers are database servers.