Managing connections through an aggregation of network resources providing offloaded connections between applications over a network

• US 20060129676A1
• Filed: 12/14/2004
• Published: 06/15/2006
• Est. Priority Date: 12/14/2004
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Biswas, Amitabha, Modi, Prashant, Hampton, Kathryn, Khalili, Mehrdad, Yip, Yiu, Sayon, Doris
• Granted Patent: US 8,984,140 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A computer system establishes offloaded connections over a network between requester applications running on client nodes and server applications running on a server node. The connections are established through an aggregated plurality of network resources of the server node. Each of the aggregated plurality of server resources is operable to provide offloaded connections over the network and each is assigned to a unique private IP address. Connect queries are generated on behalf of requesting applications. Each of the connect queries specifies one of the server applications using a first endpoint tuple. The first endpoint tuple includes one of one or more IP addresses identifying the server node publicly on the network and a first port number uniquely identifying the server application. A valid set of bypass endpoint tuples are obtained that are translated from the first endpoint tuple specified in the query. Each tuple of the set includes a different one of the assigned private IP addresses. A connect request is issued over the network that specifies a selected one of the valid set of bypass endpoint tuples as the destination transport address for the connection.

Claims

1. A method of establishing offloaded connections over a network between requesting applications running on client nodes and server applications running a server node, the connections established through an aggregated plurality of network resources comprising the server node, each of the aggregated plurality operable to provide offloaded connections over the network and each assigned to a unique private IP address, said method comprising:

generating connect queries on behalf of requesting applications, each of the connect queries specifying one of the server applications using a first endpoint tuple, the first endpoint tuple comprising one of one or more IP addresses publicly identifying the server node on the network and a first port number uniquely identifying the server application;

obtaining a set of bypass endpoint tuples translated from the first endpoint tuple specified in the connect query, each of the set comprising a different one of the assigned private IP addresses; and

issuing a connect request over the network specifying a selected one of the obtained set of bypass endpoint tuples as the destination transport address for the connection.

2. The method of claim 1 wherein said obtaining further comprises:

accessing the set of the bypass tuples translated from the specified first endpoint tuple locally at the client node whenever the set is validly cached;

accessing the set of bypass endpoint tuples translated from the specified first endpoint tuple remotely at the server node whenever the set is not validly cached; and

caching the remotely obtained set at the client node and flagging it as valid.

3. The method of claim 2 further comprising determining for each validly cached set of bypass tuples when the cached set is stale and flagging the cached set as invalid in response thereto.

4. The method of claim 3 wherein said determining further comprises:

tracking the number of connections established and disconnected using any of the bypass tuples of the cached set; and

flagging as invalid the cached set when the number of established connections and the number of disconnected connections using any of the bypass tuples of the cached set becomes equal.

5. The method of claim 4 wherein said tracking further comprises incrementing a count for each of the sets when a connection is established using one of the bypass tuples of the validly cached set, and decrementing the count whenever a connection previously established using one of the bypass tuples of the set is disconnected.

6. The method of claim 3 wherein said determining further comprises:

setting a timer associated with each of the validly cached sets to a predetermined time value; and

flagging as invalid each cached set when the predetermined time for its associated timer has expired.

7. The method of claim 2 wherein:

the server node further comprises an O/S protocol stack for providing standard connections over the network to the one or more applications running on the system; and

each of the set of bypass endpoint tuples translated from the first tuple for the specified application further comprises a second port number mapped from the first port number associated with that application.

8. The method of claim 1 further comprising establishing an offloaded connection to the specified server application over the aggregated plurality of network resources of the server node in response to the connect request, the established connection defined by a destination transport address comprising a selected one of the set of bypass endpoint tuples associated with the socket created for the specified server application.

9. The method of claim 8 wherein said establishing further comprises selecting the one of the obtained set of bypass endpoint tuples to be used as the destination transport address based on a connection-balancing policy executed by the client node.

10. The method of claim 9 wherein for each connection request, the connection-balancing policy selects the one of the obtained set of bypass endpoint tuples on a round-robin basis.

11. The method of claim 9 wherein for each connection request, the connection-balancing policy selects the one of the obtained set of bypass endpoint tuples on an overflow basis, wherein each connection request is for the same one of the bypass endpoint tuples until the client node fails to receive an acknowledgement in response to a connect request.

12. The method of claim 11 wherein the connection-balancing policy reissues the failed connection request specifying a different one of the obtained set of bypass tuples, and wherein further connection requests to the application specified by the first tuple from which the obtained set is translated is to the different one of the set until the client node fails to receive an acknowledgment in response to such connection request.

13. The method of claim 8 wherein the offloaded connection is further established through one or more network resources of the client node, each of the one or more network resources of the client node operable to provide offloaded connections over the network and each assigned to a unique private IP address when the client network resources are an aggregated plurality.

14. The method of claim 13 wherein said generating connect queries further comprises:

creating a connect socket for each requesting application using a client first endpoint tuple, each client first endpoint tuple comprising a public IP address identifying the client node and a first port number uniquely identifying the requesting application; and

generating a client bypass endpoint tuple for the connect socket for the requester application comprising one of the assigned unique private IP addresses when the client network resources are an aggregated plurality and which comprises the client first endpoint tuple when the one or more network resources are not aggregated.

15. The method of claim 14 wherein the issued connect request specifies the client bypass endpoint tuple as the source transport address for the offloaded connection.

16. A method of aggregating connection capacity of a plurality of network resources of a computer system, each of the plurality of resources operable to provide offloaded connections over a network to one or more applications running on the computer system, each of the one or more applications uniquely associated with a first port number, the computer system identified on the network by one or more public IP addresses, said method comprising:

identifying each of the plurality of network resources with a unique private host number;

creating a wild card socket for at least one of the one or more applications, said creating comprising;

associating one or more first endpoint tuples with the wildcard socket, the one or more first endpoint tuples each comprising a different one of the one or more public IP addresses identifying the computer system and the first port number associated with the at least one application for which the socket is created; and

translating each of the one or more first endpoint tuples to a set of bypass endpoint tuples, the members of each of the one or more sets associated with a different second port number, each member of a particular set comprising the set'"'"'s associated port number and a different one of the assigned private IP addresses; and

establishing an offloaded connection to the at least one of the one or more applications through a selected one of the plurality of network resources.

17. The method of claim 16 wherein said establishing further comprises:

receiving a connect query specifying the at least one application using one of the one or more first tuples associated with the wild card listening socket;

issuing a response to the connect query comprising the set of bypass tuples translated from the one of the one or more first tuples comprising the connect query; and

receiving a connect request comprising a selected one of the set of bypass tuples comprising the response to the connect query, the selected one of the set comprising the private IP address assigned to the selected one of the network resources.

18. A method of establishing offloaded connections over a network between requesting applications running on client nodes and server applications running on a server node, the connections established through an aggregated plurality of network resources comprising the server node, each of the aggregated plurality operable to provide offloaded connections over the network and each assigned to a unique private IP address, the server node further comprising an O/S protocol stack operable to provide conventional connections over the network, said method comprising:

generating connect queries on behalf of the requesting applications, each of the connect queries specifying one of the server applications using a first endpoint tuple, the first endpoint tuple comprising one of one or more IP addresses publicly identifying the server node on the network and a first port number uniquely identifying the server application;

obtaining a set of bypass endpoint tuples translated from the first endpoint tuple specified in the connect query, each of the set comprising a different one of the assigned private IP addresses and a second port number mapped from the first port number; and

issuing a connect request over the network specifying a selected one of the obtained set of bypass endpoint tuples as the destination transport address for the connection.

19. The method of claim 18 wherein said obtaining further comprises:

accessing the set of the bypass tuples translated from the specified first endpoint tuple locally at the client node whenever the set is validly cached;

accessing the set of bypass endpoint tuples translated from the specified first endpoint tuple remotely at the server node whenever the set is not validly cached; and

caching the remotely obtained set at the client node and flagging it as valid.

20. The method of claim 19 further comprising determining for each validly cached set of bypass tuples when the cached set is stale and flagging the cached set as invalid in response thereto.

21. The method of claim 20 wherein said determining further comprises:

for each validly cached set, tracking the number of connections established and disconnected using any of the bypass tuples of the cached set; and

flagging as invalid the cached set when the number of established connections and the number of disconnected connections using any of the bypass tuples of the cached set becomes equal.

22. The method of claim 20 wherein said determining further comprises:

setting a timer associated with each of the validly cached sets to a predetermined time value; and

flagging as invalid each cached set when the predetermined time for its associated timer has expired.

23. The method of claim 20 further comprising establishing an offloaded connection to the specified server application over the aggregated plurality of network resources of the server node in response to the connect request, the established connection defined by a destination transport address comprising a selected one of the set of bypass endpoint tuples associated with the socket created for the specified server application.

24. The method of claim 23 wherein said establishing further comprises selecting the one of the obtained set of bypass endpoint tuples to be used as the destination transport address based on a connection-balancing policy executed by the client node.

25. A method of aggregating connection capacity of a plurality of network resources of a computer system, each of the plurality of resources operable to provide offloaded connections over a network to one or more applications running on the computer system, each of the one or more applications uniquely associated with a first port number, the computer system identified on the network by one or more public IP addresses, said method comprising:

identifying each of the plurality of network resources with a unique private host number;

creating a wild card socket for at least one of the one or more applications, said creating comprising;

associating one or more first endpoint tuples with the wildcard socket, the one or more first endpoint tuples comprising a different one of the one or more public IP addresses identifying the computer system and the first port number associated with the at least one application for which the socket is created; and

translating each of the one or more first endpoint tuples to a set of bypass endpoint tuples, each of the one or more sets assigned a different second port number, each member of a particular set comprising the set'"'"'s assigned port number and a different one of the assigned private IP addresses; and

providing one of the one or more sets of bypass tuples in response to a connect query received over the network, the provided one of the one or more sets translated from the one of the one or more tuples specified in the connect query.

26. The method of claim 25 further comprising establishing an offloaded connection through one of the aggregated plurality of resources in response to a connect request, the connect request further comprising a selected one of the provided set of bypass tuples, the selected one of the bypass tuples comprising the private IP address assigned to the selected one of the resources;

and defining a destination transport address for the established request using the selected one of the bypass tuples.

27. A method of establishing offloaded connections over a network between requesting applications running on client nodes and server applications running a server node, the connections established through an aggregated plurality of network resources comprising the server node, each of the aggregated plurality operable to provide offloaded connections over the network and each assigned to a unique private IP address, said method comprising:

generating connect queries on behalf of requesting applications, each of the connect queries specifying one of the server applications using a first endpoint tuple, the first endpoint tuple comprising one of one or more IP addresses publicly identifying the server node on the network and a first port number uniquely identifying the server application;

obtaining a set of bypass endpoint tuples translated from the first endpoint tuple specified in the connect query, each of the set comprising a different one of the assigned private IP addresses, said obtaining further comprising;

accessing the set of bypass endpoint tuples locally when validly cached on the client node;

accessing the set of bypass endpoint tuples remotely at the server node when the set is not validly cached on the client node; and

caching the remotely obtained set of bypass endpoint tuples locally on the client node flagging the cached set as valid; and

issuing a connect request over the network specifying a selected one of the obtained set of bypass endpoint tuples as the destination transport address for the connection.

28. A computer system operable to establish offloaded connections over a network between requesting applications running on a client node of the computer system and server applications running on a server node of the computer system, the connections established through an aggregated plurality of network resources comprising the server node, each of the aggregated plurality operable to provide offloaded connections over the network and each assigned to a unique private IP address, said computer system further comprising:

means for generating connect queries on behalf of the requesting applications, each of the connect queries specifying one of the server applications using a first endpoint tuple, the first endpoint tuple comprising one of one or more IP addresses publicly identifying the server node on the network and a first port number uniquely identifying the server application;

means for obtaining a set of bypass endpoint tuples translated from the first endpoint tuple specified in the connect query, each of the set comprising a different one of the assigned private IP addresses; and

means for issuing a connect request over the network specifying a selected one of the obtained set of bypass endpoint tuples as the destination transport address for the connection.

29. The computer system of claim 28 wherein said means for obtaining further comprises:

means for accessing the set of the bypass tuples translated from the specified first endpoint tuple locally at the client node whenever the set is validly cached;

means for accessing the set of bypass endpoint tuples translated from the specified first endpoint tuple remotely at the server node whenever the set is not validly cached; and

means for caching the remotely obtained set at the client node and flagging it as valid.

30. The computer system of claim 29 further comprising means for determining for each validly cached set of bypass tuples when the cached set is stale and means for flagging the cached set as invalid in response thereto.

31. The computer system of claim 30 wherein said means for determining further comprises:

means for tracking, for each validly cached set, the number of connections established and disconnected using any of the bypass tuples of the cached set; and

means for flagging as invalid the cached set when the number of established connections and the number of disconnected connections using any of the bypass tuples of the set becomes equal.

32. The computer system of claim 31 wherein said means for tracking further comprises a counter that is incremented for each of the sets when a connection is established using any of the bypass tuples of the validly cached set, and is decremented whenever a connection previously established using any of the bypass tuples of the set is disconnected.

33. The method of claim 30 wherein said determining further comprises:

a timer means associated with each of the validly cached sets to a predetermined time value; and

means for flagging as invalid each cached set when the predetermined time for its associated timer has expired.

34. The computer system of claim 29 wherein:

the server node further comprises an O/S protocol stack for providing standard connections over the network to the one or more applications running on the system; and

each of the set of bypass endpoint tuples translated from the first tuple for the specified application further comprises a second port number mapped from the first port number associated with that application.

35. The computer system of claim 28 further comprising means for establishing an offloaded connection to the specified server application over the aggregated plurality of network resources of the server node in response to the connect request, the established connection defined by a destination transport address comprising a selected one of the set of bypass endpoint tuples associated with the socket created for the specified server application.

36. The computer system of claim 35 wherein said means for establishing further comprises means for selecting the one of the obtained set of bypass endpoint tuples to be used as the destination transport address based on a connection-balancing policy executed by the client node.

37. The computer system of claim 36 wherein for each connection request, the connection-balancing policy selects the one of the obtained set of bypass endpoint tuples on a round-robin basis.

38. The computer system of claim 36 wherein for each connection request, the connection-balancing policy selects the one of the obtained set of bypass endpoint tuples on an overflow basis, wherein each connection request is for the same one of the bypass endpoint tuples until the sever node fails to receive an acknowledgement in response to a connect request.

39. The computer system of claim 38 wherein the connection-balancing policy reissues the failed connection request specifying a different one of the obtained set of bypass tuples, and wherein further connection requests to the application specified by the first tuple from which the obtained set is translated is to the different one of the set until the client node fails to receive an acknowledgment in response to such connection request.

40. The computer system of claim 35 wherein the offloaded connection is further established through one or more network resources of the client node, each of one or more network resources of the client node operable to provide offloaded connections over the network and each assigned to a unique private IP address when the client network resources are an aggregated plurality.

41. The computer system of claim 40 wherein said means for generating connect queries further comprises:

means for creating a connect socket for each requesting application using a client first endpoint tuple, each client first endpoint tuple comprising a public IP address identifying the client node and a first port number uniquely identifying the requesting application; and

means for generating a client bypass endpoint tuple for the connect socket for the requester application comprising one of the assigned unique private IP addresses when the client network resources are an aggregated plurality and which comprises the client first endpoint tuple when the one or more network resources are not aggregated.

42. The computer system of claim 41 wherein the issued connect request specifies the bypass endpoint tuple as the source transport address for the offloaded connection.

43. A computer system having an aggregated plurality of network resources, each of the plurality of resources operable to provide offloaded connections over a network to one or more applications running the computer system, each of the one or more applications uniquely associated with a first port number, the computer system identified on the network by one or more public IP addresses, said computer system further comprising:

means for identifying each of the plurality of network resources with a unique private host number;

means for creating a wild card socket for at least one of the one or more applications, said means for creating comprising;

means for associating one or more first endpoint tuples with the wildcard socket, the one or more first endpoint tuples comprising a different one of the one or more public IP addresses identifying the computer system and the first port number associated with the at least one application for which the socket is created; and

means for translating each of the one or more first endpoint tuples to a set of bypass endpoint tuples, each of the one or more sets assigned a different second port number, each member of a particular set comprising the set'"'"'s assigned port number and a different one of the assigned private IP addresses; and

means for establishing an offloaded connection to the at least one of the one or more applications through a selected one of the plurality of network resources.

44. The computer system of claim 43 wherein said means for establishing further comprises:

means for receiving a connect query specifying the at least one application using one of the one or more first tuples associated with the wild card listening socket;

means for issuing a response to the connect query comprising the set of bypass tuples translated from the one of the one or more first tuples comprising the connect query; and

means for receiving a connect request comprising a selected one of the set of bypass tuples comprising the response to the connect query, the selected one of the set comprising the private IP address assigned to the selected one of the network resources.

45. A computer system operable to establish offloaded connections over a network between requesting applications running on client nodes comprising the computer system and server applications running on a server node comprising the computer system, the connections established through an aggregated plurality of network resources of the server node, each of the aggregated plurality operable to provide offloaded connections over the network and each assigned to a unique private IP address, the server node further comprising an O/S protocol stack operable to provide conventional connections over the network, said computer system comprising:

means for generating connect queries on behalf of the requesting applications, each of the connect queries specifying one of the server applications using a first endpoint tuple, the first endpoint tuple comprising one of one or more IP addresses publicly identifying the server node on the network and a first port number uniquely identifying the server application;

means for obtaining a set of bypass endpoint tuples translated from the first endpoint tuple specified in the connect query, each of the set comprising a different one of the assigned private IP addresses and a second port number mapped from the first port number; and

means for issuing a connect request over the network specifying a selected one of the obtained set of bypass endpoint tuples as the destination transport address for the connection.

46. The computer system of claim 45 wherein said means for obtaining further comprises:

means for accessing the set of the bypass tuples translated from the specified first endpoint tuple locally at the client node whenever the set is validly cached;

means for accessing the set of bypass endpoint tuples translated from the specified first endpoint tuple at the server node whenever the set is not validly cached; and

means for caching the remotely obtained set at the client node and flagging it as valid.

47. The computer system of claim 46 further comprising means for determining for each validly cached set of bypass tuples when the cached set is stale and means for flagging cached the set as invalid in response thereto.

48. The computer system of claim 47 wherein said means for determining further comprises:

means for tracking, for each validly cached set, the number of connections established and disconnected using any of the bypass tuples of the cached set; and

means for flagging as invalid each cached set when the number of established connections and the number of disconnected connections using any of the bypass tuples of the cached set becomes equal.

49. The computer system of claim 47 wherein said determining means further comprises:

a timer means associated with each of the validly cached sets that is set to a predetermined time value at the time the set is validly cached; and

means for flagging as invalid each cached set when the predetermined time for its associated timer has expired.

50. The computer system of claim 46 further comprising means for establishing an offloaded connection to the specified server application over the aggregated plurality of network resources of the server node in response to the connect request, the established connection defined by a destination transport address comprising a selected one of the set of bypass endpoint tuples associated with the socket created for the specified server application.

51. The computer system of claim 50 wherein said means for establishing further comprises means for selecting the one of the obtained set of bypass endpoint tuples to be used as the destination transport address based on a connection-balancing policy executed by the client node.

52. A computer system having an aggregated plurality of network resources, each of the plurality of resources operable to provide offloaded connections over a network to one or more applications running the computer system, each of the one or more applications uniquely associated with a first port number, the computer system identified on the network by one or more public IP addresses, said computer system comprising:

means for identifying each of the plurality of network resources with a unique private host number;

means for creating a wild card socket for at least one of the one or more applications, said means for creating comprising;

means for associating one or more first endpoint tuples with the wildcard socket, the one or more first endpoint tuples comprising a different one of the one or more public IP addresses identifying the computer system and the first port number associated with the at least one application for which the socket is created; and

means for translating each of the one or more first endpoint tuples to a set of bypass endpoint tuples, each of the one or more sets assigned a different second port number, each member of a particular set comprising the set'"'"'s assigned port number and a different one of the assigned private IP addresses; and

means for providing one of the one or more sets of bypass tuples in response to a connect query received over the network, the provided one of the one or more sets translated from the one of the one or more tuples specified in the connect query.

53. The computer system of claim 52 further comprising means for establishing an offloaded connection through one of the aggregated plurality of resources in response to a connect request, the connect request further comprising a selected one of the provided set of bypass tuples, the selected one of the bypass tuples comprising the private IP address assigned to the selected one of the resources;

and means for defining a destination transport address for the established request using the selected one of the bypass tuples

54. A computer system operable to establish offloaded connections on behalf of requesting applications running on the computer system to one or more applications running on a server node over a network, said computer system comprising:

one or more client network resources operable to provide offloaded connections over the network;

a library in communication with the one or more requestor applications through an application program interface (API), the library for intercepting API requests to create connect sockets for the requesting applications, the library associating first endpoint tuples with each connect socket created comprising the public IP address and a unique first port number associated with each of the requesting applications; and

an address translation service provider (ATSP) in communication with the library and the network, the ATSP for issuing connect queries over the network to obtain a set of server bypass endpoint tuples from the server node, each connect query specifying a first server endpoint tuple associated with a listening socket created for one of the server applications, the set of obtained server bypass endpoint tuples being translated from the specified first server endpoint tuple; and

a cache for caching obtained sets of server bypass tuples, the cache associated with the ATSP to receive a cache query for each of the connect queries, the set of obtained server bypass endpoint tuples being provided from the cache in response to the cache query whenever an obtained set is validly cached therein.

55. The computer system of claim 54 wherein the cache further comprises a counter associated with each obtained set of server bypass tuples, the counter having an original count and, the counter being incremented each time a connection is established using one of the bypass tuples of the obtained set, and decremented each time one of the established connections is disconnected;

and wherein the cache invalidates the obtained set whenever its count returns to the original count.

56. The computer system of claim 54 wherein the cache further comprises a timer associated with each obtained set of server bypass tuples, the timer set with a predetermined time limit;

and wherein the cache invalidates the obtained set whenever the predetermined time limit expires.

57. The computer system of claim 56 wherein the client node issues a connect request to establish each offloaded connection between a requesting application and a server application, the connect request specifying a selected one of the obtained set of server bypass tuples translated from the first server endpoint tuple associated with the listening socket created for the server application as a destination transport address for the connection and a client bypass tuple generated from the first client endpoint tuple associated with the connect socket created for the requesting application as a source transport address.

58. The computer system of claim 57 wherein the selected one of the obtained set of server bypass tuples is chosen based on a connection-balancing policy executed by the client node.

59. The computer system of claim 58 wherein for each request for a connection to the one of the server applications, the connection-balancing policy chooses one of the obtained set of server bypass tuples translated from the first server endpoint tuple associated with the listening socket created for the one of the server applications on a round-robin basis.

60. The computer system of claim 58 wherein for each request for a connection to the one of the server applications, the connection-balancing policy chooses the same one of the obtained set of server bypass tuples translated from the first server endpoint tuple associated with the listening socket created for the one of the server applications until the connect request fails, and reissues the connect request using a different one of the set until the connection request fails using the different one.

61. A computer system operable to establish offloaded connections on behalf of service applications listening on the computer system to one or more requesting applications running on a client node over a network, the computer system identified on the network by one or more public IP addresses, said computer system comprising:

one or more server network resources operable to provide offloaded connections over the network;

a library in communication with the one or more service applications through an application program interface (API), the library for intercepting API requests to create listening sockets for the service applications, the library associating first endpoint tuples with each listening socket created comprising the public IP address and a unique first port number associated with each of the service applications;

wherein one or more of the listening sockets created are wildcard listening sockets, the library associating one or more first endpoint tuples with each wildcard socket, each of the one or more first endpoint tuples comprising a different one of the one or more public IP addresses and the first port number associated with the service application for which the wildcard socket was created; and

an address translation service provider (ATSP) in communication with the library and the network, the ATSP for translating each of the first server endpoint tuples associated with a listening socket created for one of the server applications to a set of server bypass endpoint tuples, each of the set comprising a different one of the private IP addresses assigned to the server network resources, each of the set of server bypass endpoint tuples translated from one of the one or more first endpoint tuples associated with a wildcard socket further comprising a unique second port number.