Methods to Manage Services over a Service Gateway

• US 20130166762A1
• Filed: 12/23/2011
• Published: 06/27/2013
• Est. Priority Date: 12/23/2011
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: JALAN, Rajkumar, XU, Feilong, SAMPAT, Rishi
• Granted Patent: US 9,094,364 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/255 Maintenance or indexing of mapping tables
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

In activating a service, a service gateway retrieves a service table entry using a service or server address of the service entry, where the service table entry has an association with another service entry. An association to the service entry is added and a marker value is set to indicate associations with two service entries. After a time duration, the association with the other service entry is removed, and the marker value is changed accordingly. In deactivating a service entry, the service gateway calculates a hash value for the service or server address of the service entry. After matching the hash value to a hash value of another service entry, an association with the other service entry is added. A marker value is set to indicate associations with two service entries. After a time duration, the association with the service entry is removed, and the marker value is changed accordingly.

Claims

1. A method for managing services by a service gateway, comprising:

(a) obtaining a first service entry and a second service entry by the service gateway, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

(b) obtaining a service table entry of a service mapping table , the service table entry having an association with the second service entry;

(c) adding to the service table entry an association to the first service entry;

(d) storing a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

(e) setting a timer associated with the service table entry to a predetermined duration; and

(f) in response to an expiration of the timer, removing the association with the second service entry from the service table entry.

2. The method of claim 1, wherein prior to the removing (f) of the association with the second service entry from the service table entry, the method further comprises:

(g) receiving a data packet by the service gateway from a host, the data packet comprising a third service address;

(h) comparing the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

(i) in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determining the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, creating a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third service address and the first service address, modifying the data packet by replacing the third service address with the first server address;

(l) in response to finding the match between the third service address and the second service address, modifying the data packet by replacing the third service address with the second server address; and

(m) sending the modified data packet to the first server address or the second server address.

3. The method of claim 2, wherein the creating (j) comprises:

(j1) in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the first server address of the first service entry and the third service address of the data packet in the session entry; and

(j2) in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the second server address of the second service entry and the third service address of the data packet in the session entry.

4. The method of claim 2, wherein the receiving (g) comprises:

(g1) receiving the data packet from the host;

(g2) comparing the data packet against session entries in the session table;

(g3) in response to finding a match between the data packet and a given session entry in the session table;

(g3i) modifying the data packet by replacing the third service address with a given server address in the given session entry;

(g3ii) skipping the comparing (h), the determining (i), the creating (j), the modifying (k), the modifying (1), and the sending (m); and

(g3iii) sending the modified data packet to the given server address; and

(g4) in response to finding no matches between the data packet and the session entries, performing the comparing (h), the determining (i), the creating (j), the modifying (k), the modifying (l), and the sending (m).

5. The method of claim 1, wherein prior to the removing (f) of the association with the second service entry from the service table entry, the method further comprises:

(g) receiving a data packet by the service gateway from a server, the data packet comprising a third server address;

(h) comparing the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

(i) in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determining the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, creating a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third server address and the first server address, modifying the data packet by replacing the third server address with the first service address;

(l) in response to finding the match between the third server address and the second server address, modifying the data packet by replacing the third server address with the second service address; and

(m) sending the modified data packet to a host address from the data packet.

6. The method of claim 5, wherein the creating (j) comprises:

(j1) in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the first service address of the first service entry and the third server address of the data packet in the session entry; and

(j2) in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the second service address of the second service entry and the third service address of the data packet in the session entry.

7. The method of claim 5, wherein the receiving (g) comprises:

(g1) receiving the data packet from the server;

(g2) comparing the data packet against session entries in the session table;

(g3) in response to finding a match between the data packet and a given session entry in the session table;

(g3i) modifying the data packet by replacing the third server address with a given service address in the given session entry;

(g3ii) skipping the comparing (h), the determining (i), the creating (j), the modifying (k), the modifying (l), and the sending (m); and

(g3iii) sending the modified data packet to the host address; and

(g4) in response to finding no matches between the data packet and the session entries, performing the comparing (h), the determining (i), the creating (j), the modifying (k), the modifying (l), and the sending (m).

8. The method of claim 1, wherein the obtaining (a) comprises:

(a1) receiving the first service entry for a service to be activated by the service gateway; and

(a2) retrieving the service table entry of a service mapping table using the first service address or the first server address of the first service entry.

9. The method of claim 1, wherein the obtaining (a) comprises:

(a1) receiving the second service entry for a service to be deactivated by the service gateway; and

(a2) retrieving the first service entry using the second service entry by the service gateway.

10. The method of claim 9, wherein the receiving (a1), the retrieving (a2), and the adding (c) comprises:

(a1i) receiving an indication to deactivate the second service entry by the service gateway;

(a1ii) calculating a first hash value for the second service address or the second server address of the second service entry;

(a2i) determining whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

(c1) in response to determining that the second hash value matches the first hash value, adding an association with the first service entry to the service table entry.

11. A computer program product for managing services, the computer program product comprising:

a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code configured to;

(a) obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

(b) obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

(c) add to the service table entry an association to the first service entry;

(d) store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

(e) set a timer associated with the service table entry to a predetermined duration; and

(f) in response to an expiration of the timer, remove the association with the second service entry from the service table entry.

12. The computer program product of claim 11, wherein the computer readable program code method is further configured to, prior to the removing (f) of the association with the second service entry from the service table entry:

(g) receive a data packet by the service gateway from a host, the data packet comprising a third service address;

(h) compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

(i) in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determine the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third service address and the first service address, modify the data packet by replacing the third service address with the first server address;

(l) in response to finding the match between the third service address and the second service address, modify the data packet by replacing the third service address with the second server address; and

(m) send the modified data packet to the first server address or the second server address.

13. The computer program product of claim 12, wherein the create (j) comprises:

(j1) in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first server address of the first service entry and the third service address of the data packet in the session entry; and

(j2) in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second server address of the second service entry and the third service address of the data packet in the session entry.

14. The computer program product of claim 12, wherein the receive (g) comprises:

(g1) receive the data packet from the host;

(g2) compare the data packet against session entries in the session table;

(g3) in response to finding a match between the data packet and a given session entry in the session table;

(g3i) modify the data packet by replacing the third service address with a given server address in the given session entry;

(g3ii) skip the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m); and

(g3iii) send the modified data packet to the given server address; and

(g4) in response to finding no matches between the data packet and the session entries, perform the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m).

15. The computer program product of claim 11, wherein the computer readable program code method is further configured to, prior to removing the association with the second service entry from the service table entry:

(g) receive a data packet by the service gateway from a server, the data packet comprising a third server address;

(h) compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

(i) in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determine the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third server address and the first server address, modify the data packet by replacing the third server address with the first service address;

(l) in response to finding the match between the third server address and the second server address, modify the data packet by replacing the third server address with the second service address; and

(m) send the modified data packet to a host address from the data packet.

16. The computer program product of claim 15, wherein the create (j) comprises:

(k1) in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first service address of the first service entry and the third server address of the data packet in the session entry; and

(k2) in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second service address of the second service entry and the third service address of the data packet in the session entry.

17. The computer program product of claim 15, wherein the receive (g) comprises:

(g1) receive the data packet from the server;

(g2) compare the data packet against session entries in the session table;

(g3) in response to finding a match between the data packet and a given session entry in the session table;

(g3i) modify the data packet by replacing the third server address with a given service address in the given session entry;

(g3ii) skip the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m); and

(g3iii) send the modified data packet to the host address; and

(g4) in response to finding no matches between the data packet and the session entries, perform the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m).

18. The computer program product of claim 11, wherein the obtain (a) comprises:

(a1) receive the first service entry for a service to be activated by the service gateway; and

(a2) retrieve the service table entry of a service mapping table using the first service address or the first server address of the first service entry.

19. The computer program product of claim 11, wherein the obtain (a) comprises:

(a1) receive the second service entry for a service to be deactivated by the service gateway; and

(a2) retrieve the first service entry using the second service entry by the service gateway.

20. The computer program product of claim 19, wherein the receive (a1), the retrieve (a2), and the add (c) comprises:

(a1i) receive an indication to deactivate the second service entry by the service gateway;

(a1ii) calculate a first hash value for the second service address or the second server address of the second service entry;

(a2i) determine whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

(c1) in response to determining that the second hash value matches the first hash value, add an association with the first service entry to the service table entry.

21. A system, comprising:

a processor; and

a computer readable storage medium having computer readable program code embodied therewith for execution by the processor, the computer readable program code configured to;

(a) obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

(b) obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

(c) add to the service table entry an association to the first service entry;

(d) store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

(e) set a timer associated with the service table entry to a predetermined duration;

(f) in response to an expiration of the timer, remove the association with the second service entry from the service table entry; and

(g) in response to removing the association with the second service from the service table entry, change the marker value to indicate that the service table entry is not associated with a plurality of service entries.

22. The system of claim 21, wherein the computer readable program code method is further configured to, prior to the removing (f) of the association with the second service entry from the service table entry:

(g) receive a data packet by the service gateway from a host, the data packet comprising a third service address;

(h) compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

(i) in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determine the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third service address and the first service address, modify the data packet by replacing the third service address with the first server address;

(l) in response to finding the match between the third service address and the second service address, modify the data packet by replacing the third service address with the second server address; and

(m) send the modified data packet to the first server address or the second server address.

23. The system of claim 22, wherein the create (j) comprises:

(j1) in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first server address of the first service entry and the third service address of the data packet in the session entry; and

(j2) in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second server address of the second service entry and the third service address of the data packet in the session entry.

24. The system of claim 22, wherein the receive (g) comprises:

(g1) receive the data packet from the host;

(g2) compare the data packet against session entries in the session table;

(g3) in response to finding a match between the data packet and a given session entry in the session table;

(g3i) modify the data packet by replacing the third service address with a given server address in the given session entry;

(g3ii) skip the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m); and

(g3iii) send the modified data packet to the given server address; and

(g4) in response to finding no matches between the data packet and the session entries, perform the compare (h), the determine (i), the create (j), the modify (k), the modify (l), and the send (m).

25. The system of claim 21, wherein the computer readable program code method is further configured to, prior to removing the association with the second service entry from the service table entry:

(g) receive a data packet by the service gateway from a server, the data packet comprising a third server address;

(h) compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

(i) in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determine the marker value associated with the service table entry;

(j) in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

(k) in response to finding the match between the third server address and the first server address, modify the data packet by replacing the third server address with the first service address;

(l) in response to finding the match between the third server address and the second server address, modify the data packet by replacing the third server address with the second service address; and

(m) send the modified data packet to a host address from the data packet.

26. The system of claim 25, wherein the create (k) comprises:

(k1) in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first service address of the first service entry and the third server address of the data packet in the session entry; and

(k2) in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second service address of the second service entry and the third service address of the data packet in the session entry.

27. The system of claim 25, wherein the receive (h) comprises:

(h1) receive the data packet from the server;

(h2) compare the data packet against session entries in the session table;

(h3) in response to finding a match between the data packet and a given session entry in the session table;

(h3i) modify the data packet by replacing the third server address with a given service address in the given session entry;

(h3ii) skip the compare (i), the determine (j), the create (k), the modify (l), the modify (m), and the send (n); and

(h3iii) send the modified data packet to the host address; and

(h4) in response to finding no matches between the data packet and the session entries, perform the compare (i), the determine (j), the create (k), the modify (l), the modify (m), and the send (n).

28. The system of claim 21, wherein the obtain (a) comprises:

(a1) receive the first service entry for a service to be activated by the service gateway; and

(a2) retrieve the service table entry of a service mapping table using the first service address or the first server address of the first service entry.

29. The system of claim 21, wherein the obtain (a) comprises:

(a1) receive the second service entry for a service to be deactivated by the service gateway; and

(a2) retrieve the first service entry using the second service entry by the service gateway.

30. The system of claim 29, wherein the receive (a1), the retrieve (a2), and the add (c) comprises:

(a1i) receive an indication to deactivate the second service entry by the service gateway;

(a1ii) calculate a first hash value for the second service address or the second server address of the second service entry;

(a2i) determine whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

(c1) in response to determining that the second hash value matches the first hash value, add an association with the first service entry to the service table entry.