Performing message payload processing functions in a network element on behalf of an application

• US 20060123467A1
• Filed: 12/06/2004
• Published: 06/08/2006
• Est. Priority Date: 12/06/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kumar, Sandeep, Rajendran, Saravanakumar, Ho, Ricky, Anthias, Tefcros
• Granted Patent: US 7,987,272 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element receives user-specified input that indicates a particular message classification. The network element also receives one or more data packets. Based on the data packets, the network element determines that an application layer message, which is collectively contained in payload portions of the data packets, matches the particular message classification. The network element processes at least a portion of the message by performing, on behalf of the application to which the message is directed, and relative to at least the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification.

Claims

1. A method of performing message payload processing functions in a network element on behalf of an application, the method comprising the computer-implemented steps of:

receiving user-specified input at the network element;

receiving one or more data packets at the network element;

determining, based on the one or more data packets, a particular message classification indicated in the user-specified input; and

processing at least a portion of an application layer message contained in one or more payload portions of the one or more data packets by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application.

2. A method as recited in claim 1, wherein processing the portion of the application layer message comprises conceptually separating the contents of the application layer message from the remainder of the one or more data packets and inspecting the contents in a manner that is based on semantics associated with the contents.

3. A method as recited in claim 1, wherein the user-specified input indicates that the one or more actions are to be associated with the particular message classification.

4. A method as recited in claim 1, further comprising:

sending, from the network element, one or more data packets that contain a modified message;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce the modified message.

5. A method as recited in claim 1, wherein performing the one or more actions comprises performing the one or more actions in an order indicated in the user-specified input.

6. A method as recited in claim 1, wherein determining the portion of a message comprises assembling, at the network element, contents of payload portions of two or more of the data packets.

7. A method as recited in claim 1, wherein the one or more data packets are destined for a first destination, and wherein at least one of the one or more actions comprises modifying one or more headers associated with the one or more data packets so that the one or more data packets are destined for one or more destinations that include a second destination that differs from the first destination.

8. A method as recited in claim 1, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to a destination for which the one or more data packets are destined.

9. A method as recited in claim 1, wherein at least one of the one or more actions comprises writing at least a part of the message to a log.

10. A method as recited in claim 1, wherein at least one of the one or more actions comprises encrypting at least a portion of the message.

11. A method as recited in claim 1, wherein at least one of the one or more actions comprises signing at least a portion of the message.

12. A method as recited in claim 1, wherein at least one of the one or more actions comprises verifying at least a portion of the message.

13. A method as recited in claim 1, wherein at least one of the one or more actions comprises sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

14. A method as recited in claim 1, wherein the network element is a network switch or router.

15. A method as recited in claim 1, wherein the one or more actions comprise modifying the portion of the message so that the portion of the message is formatted, changed, or transformed in a message format that differs from a message format in which the portion of the message was formatted, changed, or transformed when the one or more data packets were received at the network element.

16. A method as recited in claim 1, wherein the one or more actions comprise modifying the portion of the message so that the portion of the message is carried in an application layer protocol that differs from the application layer protocol in which the message was carried when the one or more data packets were received at the network element.

17. A method as recited in claim 1, further comprising:

encapsulating the portion of the message within a message that contains a header that indicates one or more actions taken by a previous node.

18. A method as recited in claim 1, wherein the application layer message comprises a a multi-part MIME message, and further comprising handling each part of the multi-part MIME message separately and independently from each other part of the multi-part MIME message.

44. A method as recited in claim 1, further comprising:

performing, at the network element, an operation on a message that is a request message, a response message, an exception processing message, or a message that was not sent between a client application and a server application.

19. A method of performing message payload processing functions in a network router or switch on behalf of an application, the method comprising the computer-implemented steps of:

receiving one or more first data packets at the network router;

determining, based on at least a first portion of a first application layer message contained in one or more payload portions of the one or more first data packets, a first message classification;

processing the first message at the network router by performing, relative to the first message, one or more first actions that are associated with the first message classification;

receiving one or more second data packets at the network router;

determining, based on at least a second portion of a second application layer message contained in one or more payload portions of the one or more second data packets, a second message classification that differs from the first message classification; and

processing the second message at the network router by performing, relative to the second message, one or more second actions that are associated with the second message classification.

20. A method as recited in claim 19, wherein the one or more first actions differ from the one or more second actions.

21. A computer-readable medium carrying one or more sequences of instructions for performing message payload processing functions in a network element on behalf of an application, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

receiving user-specified input at the network element;

receiving one or more data packets at the network element;

determining, based on the one or more data packets, a particular message classification indicated in the user-specified input; and

processing at least a portion of an application layer message contained in one or more payload portions of the one or more data packets by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application.

22. An apparatus for performing message payload processing functions in a network element on behalf of an application, comprising:

means for receiving user-specified input at the network element;

means for receiving one or more data packets at the network element;

means for determining, based on the one or more data packets, a particular message classification indicated in the user-specified input; and

means for processing at least a portion of an application layer message contained in one or more payload portions of the one or more data packets by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application.

23. An apparatus for performing message payload processing functions in a network element on behalf of an application, comprising:

a network interface that is coupled to a data network for receiving one or more packet flows therefrom;

a processor;

one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of;

receiving user-specified input at the network element;

receiving one or more data packets at the network element;

determining, based on the one or more data packets, a particular message classification indicated in the user-specified input; and

processing at least a portion of an application layer message contained in one or more payload portions of the one or more data packets by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application.

24. A method of filtering packets on which message level processing is to be performed, the method comprising the computer-implemented steps of:

determining whether information contained in a layer 2-4 header of a packet satisfies specified criteria;

if the information satisfies the specified criteria, then directing the packet to a blade that performs message level processing based on at least a portion of an application layer message that is at least partially contained in the packet; and

if the information does not satisfy the specified criteria, then forwarding the packet towards the packet'"'"'s destination without sending the packet to the blade.

25. A method as recited in claim 24, wherein the information comprises one or more of a source IP address and a destination IP address.

26. A method as recited in claim 24, wherein the information comprises one or more of a source TCP port and a destination TCP port.

27. A method of transparently performing message payload processing functions in a network element on behalf of an application, the method comprising the computer-implemented steps of:

intercepting, at the network element, one or more data packets that are destined for a device other than the network element, wherein the device hosts the application;

determining at least a portion of an application layer message that is (a) contained in one or more payload portions of the one or more data packets and (b) directed to the application; and

based on the portion of the message, performing one or more actions on behalf of the application.

28. A method as recited in claim 27, further comprising:

determining, based on the portion of the message, a particular message classification; and

determining one or more actions with which the particular message classification is associated;

wherein performing the one or more actions comprises performing the one or more actions in response to a determination that the particular message classification is associated with the one or more actions.

29. A method as recited in claim 27, further comprising:

sending, from the network element, one or more data packets that contain a modified message;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce the modified message.

30. A method as recited in claim 27, further comprising:

sending, from the network element, one or more data packets that contain a modified message;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce the modified message.

31. A method as recited in claim 27, further comprising:

receiving user-specified input at the network element, wherein the user-specified input indicates an order in which the one or more actions are to be performed;

wherein performing the one or more actions comprises performing the one or more actions in the order.

32. A method as recited in claim 27, further comprising:

receiving user-specified input at the network element, wherein the user-specified input indicates one or more criteria; and

determining whether the portion of the message satisfies the one or more criteria;

wherein performing the one or more actions comprises performing the one or more actions that are associated with the one or more criteria.

33. A method as recited in claim 27, wherein determining whether the portion of the message satisfies the one or more criteria comprises determining whether a specified string of text occurs within the portion of the message.

34. A method as recited in claim 27, wherein the portion of the message is formatted in Extensible Markup Language (XML), and wherein determining whether the portion of the message satisfies the one or more criteria comprises determining whether a specified path occurs within the portion of the message.

35. A method as recited in claim 27, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to a destination for which the one or more data packets are destined.

36. A method as recited in claim 27, wherein at least one of the one or more actions comprises writing information to a log.

37. A method as recited in claim 27, wherein at least one of the one or more actions comprises sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

38. A method as recited in claim 27, wherein the network element is a network switch or router.

39. A method as recited in claim 27, wherein the network element is a proxy device.

40. A method as recited in claim 27, wherein the one or more actions comprise modifying a portion of the message so that the portion of the message is formatted in a message format that differs from a message format in which the portion of the message was formatted when the one or more data packets were received at the network element.

41. A method as recited in claim 27, further comprising:

processing, at the network element, a message that is not destined for the device that hosts the application.

42. A method as recited in claim 27, further comprising:

determining whether the portion of the message will cause an entity to fail if the entity receives the message; and

in response to a determination that the portion of the message will cause the entity to fail if the entity receives the message, performing one or more specified actions.

43. A method as recited in claim 27, further comprising:

performing, at the network element, an operation on a message that is a request message, a response message, an exception processing message, or a message that was not sent between a client application and a server application.