MONITORING AND DYNAMIC TUNING OF TARGET SYSTEM PERFORMANCE

• US 20090293051A1
• Filed: 05/22/2008
• Published: 11/26/2009
• Est. Priority Date: 05/22/2008
• Status: Abandoned Application

• Current Assignee: Fortinet Inc.
• Original Assignee: Fortinet Inc.
• Inventors: Krywaniuk, Andrew
• Application Number:
  US12/125,910
• Publication Number:
  US 20090293051A1
• Time in Patent Office: Days
• US Class Current: 717/173
• CPC Class Codes: G06F 11/3466 Performance evaluation by tracing or monitoring
• CPC Class Codes: G06F 2201/865 Monitoring of software
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files

Abstract

Methods and systems for remotely monitoring and tuning the performance of one or more target systems are provided. According to one embodiment, a separate tuning server receives data, such as profiling data, that has been collected regarding a target system. Then, if based on the data it is determined that performance attributes of the target system can be improved, the performance of the target system is dynamically tuned. Depending upon the circumstances, the target system may be caused to replace an application component of a program being executed by the target system with a new application component, which may be contained within an image chosen from a set of pre-built images or built and compiled by the tuning server specifically for the target system. In some cases, the dynamic tuning of the performance of the target system may involve making a change to a configuration file on the target system.

Claims

1. A method comprising:

receiving data collected regarding a target system at a separate tuning server; and

if based on the data it is determined that performance attributes of the target system can be improved, then dynamically tuning the performance of the target system.

2. The method of claim 1, further comprising causing the target system to replace an application component of a program being executed by the target system with a new application component.

3. The method of claim 2, wherein the new application component is contained within an image chosen from a set of pre-built images.

4. The method of claim 2, wherein the new application component is built and compiled by the separate tuning server specifically for the target system based on the data.

5. The method of claim 1, wherein said dynamically tuning the performance of the target system includes making a change to a configuration file or script file on the target system.

6. The method of claim 1, further comprising applying a hot patch to an application image on the target system.

7. The method of claim 1, wherein the data comprises profiling data.

8. The method of claim 7, wherein the profiling data contains information indicative of active or inactive code paths of the existing program during a profiling period and wherein the method further comprises:

based on the profiling data, the separate tuning server (i) causing a first module or first section of code within the existing program to be restructured to provide more efficient code paths for more frequently encountered inputs or (ii) causing a second module or second section of code to be removed from the existing program.

9. The method of claim 1, wherein the data comprises metrics relating to one or more of memory utilization by the target system, central processor unit utilization by the target system, latency in processing a request by the target system, time spent in input/output operations by the target system, time spent swapping to a mass storage medium by the target system, occurrence of certain faults within the target system, load at various times of day on the target system, distribution of protocols in traffic being processed by the target system and frequency of security incidents observed by the target system.

10. The method of claim 9, further comprising the separate tuning server causing a value of a system parameter of the target system to be changed responsive to analysis of the metrics.

11. The method of claim 1, wherein the data contains information indicative of attacks attempted against the target system and wherein the method further comprises the separate tuning server causing code to mitigate the attacks to be uploaded to the target system.

12. The method of claim 1, wherein the new application component includes randomly generated changes that do not provide any tuning advantage, but which provide resistance to known attacks via code polymorphism.

13. The method of claim 1, wherein the new application component is recompiled after enabling or disabling one or more conditional compilation options within source code of the program.

14. The method of claim 13, wherein the new application component enables or disables symmetric multiprocessing, hyper-threading or configures other processor-specific options on the target system.

15. The method of claim 1, wherein said dynamically tuning the performance of the target system includes upgrading firmware of a peripheral associated with the target system.

16. The method of claim 1, wherein said dynamically tuning the performance of the target system includes supplying a new bit image to a field-programmable gate array (FPGA) associated with the target system.

17. The method of claim 1, wherein the data comprises configuration information indicative of whether certain services are enabled or disabled within the target system.

18. The method of claim 17, further comprising the separate tuning server causing files or code associated with one or more disabled services to be removed from the target system.

19. The method of claim 1, wherein the separate tuning server comprises customer-premises equipment (CPE) located geographically proximate to the target system.

20. The method of claim 1, wherein the separate turning server comprises service provider equipment (SPE) located geographically remote from the target system.

21. A computer system comprising:

a storage device having stored therein a software program configured to determine a need for performance tuning in relation to a separate target system; and

a processor coupled to the storage device and configured to execute the software program to analyze profiling data received from the separate target system, where

the profiling data provides information regarding active or inactive code paths of a program executed by the separate target system during a profiling period; and

based on the profiling data, if it is determined that one or more performance attributes of the separate target system can be improved, then the software program causing the performance of the separate target system to be dynamically tuned.

22. The computer system of claim 21, wherein the software program is further configured to cause the separate target system to replace an application component of a program being executed by the separate target system with a new application component.

23. The computer system of claim 21, wherein based on the profiling data, the software program (i) causes a first module or first section of code within an existing program running on the separate target system to be restructured to provide more efficient code paths for more frequently encountered inputs or (ii) causes a second module or second section of code to be removed from the existing program.

24. The computer system of claim 21, wherein the software program additionally receives from the separate target system metrics relating to one or more of memory utilization by the remove target system, central processor unit utilization by the separate target system, latency in processing a request by the separate target system, time spent in input/output operations by the separate target system, time spent swapping to a mass storage medium by the separate target system, occurrence of certain faults within the separate target system, load at various times of day on the separate target system, distribution of protocols in traffic being processed by the separate target system and frequency of security incidents observed by the separate target system.

25. The computer system of claim 24, wherein the software program causes a value of a system parameter of the separate target system to be changed responsive to analysis of the metrics.

26. The computer system of claim 21, wherein the software program additionally receives from the separate target system information indicative of attacks attempted against the separate target system and wherein the software program further causes code to mitigate the attacks to be uploaded to the separate target system.

27. The computer system of claim 21, wherein said causing the performance of the separate target system to be dynamically tuned includes upgrading firmware of a peripheral associated with the separate target system.

28. The computer system of claim 21, wherein said causing the performance of the separate target system to be dynamically tuned includes supplying a new bit image to a field-programmable gate array (FPGA) associated with the separate target system.

29. The computer system of claim 21, wherein the software program additionally receives from the separate target system configuration information indicative of whether certain services are enabled or disabled within the separate target system and wherein the software program is further configured to cause files or code associated with one or more disabled services to be removed from the separate target system.

30. The computer system of claim 21, wherein the computer system comprises customer-premises equipment (CPE) located geographically proximate to the separate target system.

31. The computer system of claim 21, wherein the computer system comprises service provider equipment (SPE) located geographically remote from the separate target system.