Rule-based networking device

• US 20060112174A1
• Filed: 11/23/2004
• Published: 05/25/2006
• Est. Priority Date: 11/23/2004
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: L'Heureux, Israel, Malmskog, Steve
• Granted Patent: US 7,610,400 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

A networking system, device, and method are provided. The networking device typically includes a user-defined ruleset including HTTP request rules and HTTP response rules. The networking device may further include a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server. The networking device may further include a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response, and send the modified HTTP response to the client.

Claims

1. A networking device positioned intermediate a client and server on a computer network, the networking device, comprising:

a user-defined ruleset including HTTP request rules and HTTP response rules;

a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server; and

a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response, and send the modified HTTP response to the client.

2. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request header.

3. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request URL.

4. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request query.

5. The networking device of claim 1, wherein at least one of the HTTP response rules is configured to detect a test condition of a response header.

6. The networking device of claim 1, wherein at least one of the HTTP response rules is configured to detect a test condition of response content contained in an entity-body of an HTTP response.

7. The networking device of claim 1, wherein the HTTP request rules include one or more request connection rules configured to instruct the networking device to detect a test condition of an HTTP request and if the test condition is met to take a predetermined action relating to the connection over which the HTTP request has been received.

8. The networking device of claim 7, wherein the HTTP request rules include one or more request parameter rules configured to instruct the networking device to detect a test condition of the HTTP request and if the test condition is met to take a predetermined action relating to a header of the HTTP request.

9. The networking device of claim 8, wherein the request processor is configured to apply the request connection rule prior to applying the request parameter rule.

10. The networking device of claim 1, wherein the HTTP response rules include one or more response header rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to a header of the HTTP response.

11. The networking device of claim 10, wherein the test condition includes detecting that the HTTP response indicates that the request has failed.

12. The networking device of claim 11, wherein the predetermined action is to retry the request to the same server.

13. The networking device of claim 11, wherein the predetermined action is to retry the request to a different server.

14. The networking device of claim 11, wherein the HTTP response rule predicates taking a selected predetermined action based on the existence of the parameter in the HTTP response.

15. The networking device of claim 10, wherein the HTTP response rules include one or more response content rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to content of the HTTP response.

16. The networking device of claim 15, wherein the response processor is configured to apply the response header rule prior to applying the response content rule.

17. The networking device of claim 1, further comprising a configuration tool configured to enable a user to configure the HTTP request rules and HTTP response rules of the user-defined ruleset.

18. The networking device of claim 1, wherein the HTTP request is an HTTPS request.

19. The networking device of claim 1, wherein the response processor is configured to add a compact policy code to the HTTP response.

20. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

providing a user-defined ruleset executable by the networking device, the ruleset including HTTP request rules;

receiving an incoming HTTP request from the client at the networking device;

applying HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request; and

sending the modified HTTP request to the server.

21. The networking method of claim 20, wherein the HTTP request rules include one or more request connection rules configured to instruct the networking device to detect a test condition of an HTTP request and if the test condition is met to take a predetermined action relating to the connection over which the HTTP request has been received.

22. The networking method of claim 21, wherein the HTTP request rules include one or more request parameter rules configured to instruct the networking device to detect a test condition of the HTTP request and if the test condition is met to take a predetermined action relating to a header of the HTTP request.

23. The networking method of claim 22, wherein in applying the HTTP request rules, request connection rules are applied prior to applying request parameter rules.

24. The networking method of claim 20, wherein the user-defined ruleset further includes HTTP response rules, the method further comprising:

receiving an HTTP response to the modified HTTP request from the server;

applying the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response; and

sending the modified HTTP response to the client.

25. The networking method of claim 24, wherein the HTTP response rules include one or more response header rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to a header of the HTTP response.

26. The networking method of claim 25, wherein the HTTP response rules include one or more response content rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to content of the HTTP response.

27. The networking method of claim 26, wherein in applying the HTTP response rules, response header rules are applied prior to applying response content rules.

42. The networking method of claim 21, further comprising:

receiving an original HTTP response to the HTTP request, the response including a link to a URL in the first namespace;

modifying a link within the original HTTP response such that the link points to the second namespace, thereby forming a modified response; and

forwarding the modified response to the client.

43. The networking method of claim 42, further comprising:

receiving a subsequent request from the client, the request originating from the modified link in the modified response, the subsequent request being directed to the second namespace;

translating the subsequent HTTP request back into the first namespace, to form a translated subsequent HTTP request; and

forwarding the translated subsequent HTTP request to the server.

28. A networking device positioned intermediate a client and server on a computer network, the networking device comprising:

a user-defined ruleset including HTTP request rules and HTTP response rules;

a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server; and

a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response, and send the modified HTTP response to the client;

wherein the HTTP request rules include (a) request connection rules configured to instruct the networking device to detect a test condition of an HTTP request and if the test condition is met to take a predetermined action relating to the connection over which the HTTP request has been received, and (b) request parameter rules configured to instruct the networking device to detect a test condition of the HTTP request and if the test condition is met to take a predetermined action relating to a header of the request, and wherein the HTTP response rules include (c) response header rules configured to instruct the networking device to detect a test condition and if the test condition is met take a predetermined action relating to a header of the response, and (d) response content rules configured to instruct the networking device to detect a test condition and if the test condition is met take a predetermined action relating to content of the request.

29. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

at the networking device, receiving an unsecure response from the server;

converting the unsecure response to a secure response;

forwarding the secure response to the client;

receiving a secure request from the client, the secure request originating from a link contained in the secure response;

converting the secure request to an unsecure request; and

forwarding the unsecure request to the server.

30. The networking method of claim 29, wherein converting the unsecure response to a secure response is accomplished at least in part by rewriting a portion of the unsecure response from HTTP to HTTPS.

31. The networking method of claim 29, wherein response headers in the unsecure response are rewritten from HTTP to HTTPS.

32. The networking method of claim 29, wherein the links contained in the content of the unsecure response are rewritten from HTTP to HTTPS.

33. The networking method of claim 29, wherein converting the secure request to an unsecure request is accomplished at least in part by rewriting a portion of the secure request from HTTPS to HTTP.

34. The networking method of claim 29, wherein converting the secure request to an unsecure request is accomplished at least in part by rewriting a portion of a query string in the secure request from HTTPS to HTTP.

35. The networking method of claim 29, wherein converting the secure request to an unsecure request is accomplished at least in part by rewriting a portion of a referrer URL in the secure request from HTTPS to HTTP.

36. A networking device positioned intermediate a client and server on a computer network, the networking device comprising:

a response processor configured to receive an HTTP response from the server, rewrite a portion of the HTTP response from HTTP to HTTPS, and send the rewritten response to the client;

a request processor configured to receive an HTTP request from the client, rewrite a portion of the HTTP request from HTTPS to HTTP, and send the rewritten response to the server.

37. The networking device of claim 36, wherein the response processor is configured to rewrite a portion of a response header of the HTTP response from HTTP to HTTPS.

38. The networking device of claim 36, wherein the response processor is configured to rewrite a portion of a link within the HTTP response from HTTP to HTTPS.

39. The networking device of claim 36, wherein the request processor is configured to rewrite a portion of a query string of the HTTP request from HTTPS to HTTP.

40. The networking device of claim 36, wherein the request processor is configured to rewrite a portion of a referrer URL in a request header of the HTTP request from HTTPS to HTTP.

41. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

receiving a original HTTP request at the networking device, the original HTTP request being directed to a URL in a first namespace located on the server;

instructing the client to redirect the HTTP request to a URL in a second namespace;

receiving a redirected HTTP request at the networking device;

translating the redirected HTTP request back into the first namespace, to form a translated HTTP request; and

sending the translated HTTP request directed to the first namespace to the server.

44. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

receiving an HTTP request from the client, at the networking device;

translating the HTTP request from a first namespace to a second namespace;

forwarding the translated HTTP request to the server;

receiving an HTTP response to the HTTP request at the networking device;

translating the HTTP response from the second namespace back to the first namespace; and

forwarding the translated HTTP response to the client.

45. The networking method of claim 44, wherein the first namespace is not known by the server, and wherein the second namespace is not known by the client.

46. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

receiving an HTTP request from the client, at the networking device;

forwarding the HTTP request to the server;

receiving an HTTP response from the server indicating that the HTTP request has failed;

applying a user-defined rule in response to determining that the HTTP request has failed, the rule instructing the networking device to take a predetermined action.

47. The networking method of claim 46, wherein the predetermined action includes retrying the request to the same server.

48. The networking method of claim 46, wherein the predetermined action includes retrying the request to a different server.

49. The networking method of claim 46, wherein the predetermined action includes retrying the request for a predetermined number of tries.

50. The networking method of claim 46, wherein the predetermined action is based at least in part on a portion of the HTTP request.

51. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

receiving an original HTTP request from the client, at the networking device;

at least temporarily storing a copy of the original HTTP request, at the networking device;

forwarding a version of the HTTP request to the server;

receiving an HTTP response to the version of the HTTP request at the networking device;

modifying the HTTP response, at least in part based on the original HTTP request stored at the networking device; and

forwarding the modified HTTP response to the client.

52. The networking method of claim 51, further comprising,

prior to forwarding the HTTP request to the server, modifying the HTTP request to form a modified version of the HTTP request;

wherein the modified version of the HTTP request is forwarded to the server.

53. The networking method of claim 51, wherein the modified version of the HTTP

request is forwarded to the server.