PACKET RELAY PROCESSING APPARATUS

• US 20060168328A1
• Filed: 04/11/2006
• Published: 07/27/2006
• Est. Priority Date: 03/27/2001
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yokoyama, Ken, Shimada, Kuniaki, Kawasaki, Takeshi, Kurita, Toshihiko, Kageyama, Hiroyasu, Takaba, Koichi, Katsuyama, Tsuneo
• Granted Patent: US 7,433,958 B2
• Time in Patent Office: Days
• US Class Current: 709/238
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1012 based on compliance of requirements or conditions with available server resources
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.

Claims

1. A packet relay processing apparatus having a network connecting device, wherein

the network connecting device comprises

a session managing unit managing a session, and

a packet processing unit relaying a packet based on session management made by said session managing unit.

2. The packet relay processing apparatus according to claim 1, wherein

the network connecting device further comprises

a routing table storing routing information about a routing destination of a packet, and

a routing processing unit determining the routing destination of the packet based on the routing information at the start of a session;

and

said packet processing unit outputs the packet to the routing destination.

3. The packet relay processing apparatus according to claim 2, further having a server, wherein

the server comprises

a network controlling unit writing routing information to said routing table.

4. The packet relay processing apparatus according to claim 1, further having a server, wherein:

the server comprises

an external session managing unit managing a session;

said session managing unit transfers session information about a session depending on a given condition; and

said external session managing unit manages the session based on received session information.

5. The packet relay processing apparatus according to claim 1, wherein

the network connecting device further comprises

a process distributing unit, and

a plurality of service processing units;

said process distributing unit distributes a packet to at least one of said plurality of service processing units based on contents of a service for the packet; and

a service processing unit to which the packet is distributed performs a service process for the packet.

6. The packet relay processing apparatus according to claim 5, further having a server, wherein:

the server comprises

an external service processing unit;

said process distributing unit transfers a packet to the server depending on a given condition; and

said external service processing unit performs a service process for a received packet.

7. The packet relay processing apparatus according to claim 1, further having a server, wherein:

the server comprises a packet details analyzing unit;

the network connecting device further comprises

a process distributing unit, and

a plurality of service processing units;

said process distributing unit transfers a packet to said packet details analyzing unit depending on a given condition; and

said packet details analyzing unit determines contents of a service for the packet by analyzing the packet and sets the determined contents of the service in the network connecting device; and

the network connecting device processes the packet based on the contents of the determined service, after the contents of the service are set.

8. The packet relay processing apparatus according to claim 5, wherein said service processing unit has a capability for rewriting a header of a packet.

9. The packet relay processing apparatus according to claim 5, wherein said service processing unit has a capability for discarding a packet.

10. The packet relay processing apparatus according to claim 5, further having a server, wherein

said service processing unit has a capability for determining a distribution destination of a load in order to distribute a load on the server.

16. The packet relay processing apparatus according to claim 1, wherein

said session managing unit waits for a predetermined time period from a termination of a session, and deletes session information about the terminated session unless the terminated session is resumed while waiting for the predetermined time period.

17. The packet relay processing apparatus according to claim 1, wherein

the network connecting device further comprises

a counter for obtaining statistical information about a packet.

22. The packet relay processing apparatus according to claim 7, wherein

if a packet transferred to the server is an HTTP protocol GET packet, said packet details analyzing unit determines a service for the packet based on a URL (Uniform Resource Locator) included in the packet.

23. The packet relay processing apparatus according to claim 7, wherein

if a packet transferred to the server is an ACK packet for an FTP protocol PORT or PASV command, said packet details analyzing unit determines a service for the packet based on IP address and port number of a data connection corresponding to a session.

24. The packet relay processing apparatus according to claim 7, wherein

said packet details analyzing unit makes a reply instead of a distribution destination server until the distribution destination of a load on the server is determined, if a process for distributing a load on the server is performed.

11-15. -15. (canceled)

18-21. -21. (canceled)

25. (canceled)

26. A network connecting device for use in a packet relay processing apparatus, comprising:

a session managing unit managing a session; and

a packet processing unit relaying a packet based on session management made by said session managing unit.

27. The network connecting device according to claim 26, further comprising

a server transferring unit transferring session information about a session to a server comprised in the packet relay processing apparatus depending on a given condition, wherein

the server manages the session according to the transferred session information.

28. The network connecting device according to claim 26, wherein

the network connecting device further comprises

a process distributing unit, and

a plurality of service processing units;

said process distributing unit distributes a packet to at least one of the plurality of service processing units based on contents of a service for the packet; and

a service processing unit to which the packet is distributed performs a service process for the packet.

29. The network connecting device according to claim 28, wherein

said process distributing unit transfers a packet to the server comprised in the packet relay processing apparatus depending on a given condition, and makes the server perform the service process for the packet.

30. The network connecting device according to claim 26, further comprising

a process distributing unit, and

a service processing unit, wherein

said process distributing unit transfers a packet to the server comprised in the packet relay processing apparatus depending on a given condition in order to make the server determine a service for the packet;

and

the service processing unit processes a packet of the session based on contents of the service determined by the server, after the service is determined by the server.

31-35. -35. (canceled)

36. A storage medium on which is recorded a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the process comprising

setting a policy describing a rule for executing a service for a packet in a network connecting device so that the network connecting device comprised in the packet relay processing apparatus processes the packet.

37. The storage medium according to claim 36, the process further comprising

receiving a packet transferred from the network connecting device, and executing the service for the received packet.

38. A storage medium on which is recorded a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the process comprising:

receiving a packet transferred from a network connecting device comprised in the packet relay processing apparatus;

determining contents of a service for the packet by analyzing the packet; and

setting the contents of the determined service in the network connecting device in order to make the network connecting device process the packet based on the contents of the determined service.

39. A computer data signal embodied in a carrier wave and representing a program for causing a computer comprised as a network connecting device to execute a process, the process comprising:

managing a session; and

relaying a packet based on session management.

40. A computer data signal embodied in a carrier wave and representing a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the process comprising

setting a policy describing a rule for executing a service for a packet in a network connecting device which configures the packet relay processing apparatus so that the network connecting device processes the packet.

41. A computer data signal embodied in a carrier wave and representing a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the process comprising:

receiving a packet transferred from a network connecting device which configures the packet relay processing apparatus;

determining contents of a service for the packet by analyzing the packet; and

setting the contents of the determined service in the network connecting device in order to make the network connecting device process the packet based on the contents of the determined service.