REVERSE PROXY ARCHITECTURE

• US 20100071052A1
• Filed: 12/03/2008
• Published: 03/18/2010
• Est. Priority Date: 09/13/2008
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Mao, Ziqing, Herley, Cormac E.
• Application Number:
  US12/326,888
• Publication Number:
  US 20100071052A1
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

Aspects of the subject matter described herein relate to a reverse proxy architecture. In aspects, a client that seeks to access a Web document via a proxy sends a request to the reverse proxy. The reverse proxy obtains the Web document from a server indicated by the request and modifies links therein so that if the links are clicked on or otherwise fetched by the client, the communication goes back to the reverse proxy. The reverse proxy may also modify cookies, if needed, so that the cookies refer to a domain or hostname associated with the reverse proxy.

Claims

1. A method implemented at least in part by a computer, the method comprising:

receiving, at a proxy, a request for a document, the request including an indication of a server from which to obtain the document;

obtaining the document from the server;

searching through the document for a data associated with a first link, the first link including a first hostname; and

using the data to create a second link, the second link, when evaluated, including a second hostname, the second hostname encoding the first hostname therein, the second hostname referring to the proxy.

2. The method of claim 1, wherein the indication comprises a hostname of the server encoded in a hostname of the proxy.

3. The method of claim 1, wherein the request comprises an HTTP request.

4. The method of claim 1, wherein the document comprises a Web page.

5. The method of claim 1, wherein the first link comprises an absolute link and wherein using the data to create a second link comprises changing the absolute link to encode the first hostname in the second hostname.

6. The method of claim 1, wherein the first link comprises a dynamic link and wherein using the data to create a second link comprises changing a variable declaration associated with the dynamic link, the variable declaration used to form the first hostname, changing the variable declaration causing the second hostname to be generated when the dynamic link is evaluated.

7. The method of claim 1, wherein the first link comprises a dynamic link and wherein using the data to create a second link comprises changing a string associated with the dynamic link, the string used to form the first hostname, changing the string causing the second hostname to be generated when the dynamic link is evaluated.

8. The method of claim 1, further comprising sending to a Web browser of a client a document that when evaluated by the Web browser creates the second link instead of the first link of the document obtained from the server.

9. The method of claim 1, further comprising changing a cookie received from the server to refer to the proxy and sending the cookie to a Web browser of a client.

10. The method of claim 1, wherein receiving, at a proxy, a request for a document comprises receiving an encrypted request for the document from a Web browser and wherein obtaining the document from the server comprising obtaining the document from the server without encryption.

11. The method of claim 1, further comprising obtaining a hostname of the server from a hostname used to send the request to the proxy.

12. The method of claim 1, wherein using the data to create a second link comprises encoding in the second hostname whether the first link indicates that a secure channel is to be used to obtain data available via the first link.

13. In a computing environment, an apparatus, comprising:

a communications mechanism operable to receive a request for a document, the request including an indication of a server from which to obtain the document, the communications mechanism further operable to communicate with the server to obtain the document;

a link locator operable to scan the document for data associated with a first link, the first link including a first hostname; and

a link transformer operable to use the data to create a second link that, when evaluated, includes a second hostname, the second hostname encoding the first hostname therein, the second hostname referring to the proxy.

14. The apparatus of claim 13, further comprising a cookie updater operable to determine whether a cookie refers to the server and, if so, to update the cookie to refer to the proxy instead of the server.

15. The apparatus of claim 13, further comprising a certificate manager operable to provide a certificate to a requester sending the request, the certificate usable to verify that the requester is sending the request to the proxy.

16. The apparatus of claim 13, wherein the link transformer is operable to use the data to create a second link by appending a domain associated with the proxy to the first hostname.

17. A computer storage medium having computer-executable instructions, which when executed perform actions, comprising:

receiving an indication of a proxy and a first server from which to obtain a first document via the proxy;

sending a request to the proxy to obtain the first document from the first server, the first document having a first link that refers to a second server; and

receiving a second document from the proxy, the second document including a second link that has been created by the proxy using data corresponding to the first link, the second link, when evaluated, including a first hostname that refers to the proxy, the first hostname encoding a second hostname that refers to the second server.

18. The computer storage medium of claim 17, wherein receiving an indication of a proxy and a first server from which to obtain a first document via the proxy comprises receiving, at a Web browser, a hostname of the proxy that encodes a hostname of the first server therein.

19. The computer storage medium of claim 17, further comprising evaluating the second link and sending a request for a third document to the proxy, the request for the third document including the second link, as evaluated.

20. The computer storage medium of claim 17, wherein the second link comprises one or more of text, a function name, and a variable name.