NETWORK PROXY LAYER FOR POLICY-BASED APPLICATION PROXIES

• US 20150156223A1
• Filed: 12/02/2013
• Published: 06/04/2015
• Est. Priority Date: 12/02/2013
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Xu, Feilong, Chao, Chih-Wei, Chen, Lee
• Granted Patent: US 10,230,770 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

A system and method for providing a network proxy layer are disclosed. The network proxy layer may receive a connection establishment event for a client connection of an application session and send the client connection event to an application proxy for the application session, the application proxy being associated with an application of a server. Upon establishment of the client connection, the network proxy layer may receive one or more data packets from the client connection. The network proxy layer may further receive a connection establishment event for a server connection of the application session of the server, and receive one or more data packets from the server connection.

Claims

1. A method for providing a network proxy layer, comprising:

receiving a connection establishment event for a client connection of an application session;

sending a client connection event to an application proxy for the application session upon receiving the connection establishment event for the client connection, the application proxy associated with an application of a server;

receiving one or more data packets from the client connection;

receiving a connection establishment event for a server connection of the application session to the server; and

receiving one or more data packets from the server connection.

2. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

sending a client data to the application proxy, the client data derived from the one or more data packets from the client connection.

3. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a security or service policy.

4. The method of claim 1, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a protocol format associated to the application proxy.

5. The method of claim 1, wherein the receiving a connection establishment event for a server connection of the application session to the server comprises:

receiving a request for the server connection;

establishing the server connection with the server upon receiving the request for the server connection; and

receiving the connection establishment event for the server connection.

6. The method of claim 5, wherein the receiving a request for the server connection comprises an address of the server.

7. The method of claim 6, wherein the establishing the server connection with the server upon receiving the request for the server connection is based on the address of the server.

8. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

sending a server data to the application proxy wherein the server data is derived from the one or more data packets from the server connection.

9. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a security or service policy.

10. The method of claim 1, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a protocol format associated to the application proxy.

11. The method of claim 1, further comprising:

receiving client transmit data from the application proxy; and

sending the client transmit data to the server connection.

12. The method of claim 11, wherein the client transmit data is sent to the server connection as one or more data packets.

13. The method of claim 1, further comprising:

receiving server transmit data from the application proxy; and

sending the server transmit data to the client connection.

14. The method of claim 13, wherein the server transmit data is sent to the client connection as one or more data packets.

15. The method of claim 1, wherein the client connection or the server connection is an TCP connection.

16. The method of claim 1, wherein the application is one of a TCP application, a secure TCP application, a HTTP application, a secure HTTP application, a SIP application, or a secure SIP application.

17. A non-transitory computer-readable storage medium having instructions stored thereon, the instructions being executable by one or more processors to perform a method for providing a network proxy layer, the method comprising:

receiving a connection establishment event for a client connection of an application session;

sending a client connection event to an application proxy for the application session upon receiving the connection establishment event for the client connection, the application proxy associated to an application of a server;

receiving one or more data packets from the client connection;

receiving a connection establishment event for a server connection of the application session to the server; and

receiving one or more data packets from the server connection.

18. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

sending a client data to the application proxy, the client data derived from the one or more data packets from the client connection.

19. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a security or service policy.

20. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the client connection further comprises:

processing the one or more data packets from the client connection based on a protocol format associated to the application proxy.

21. The non-transitory computer-readable storage medium of claim 17, wherein the receiving a connection establishment event for a server connection of the application session to the server comprises:

receiving a request for the server connection;

establishing the server connection with the server upon receiving the request for the server connection; and

receiving the connection establishment event for the server connection.

22. The non-transitory computer-readable storage medium of claim 21, wherein the receiving a request for the server connection comprises an address of the server.

23. The non-transitory computer-readable storage medium of claim 22, wherein the establishing the server connection with the server upon receiving the request for the server connection is based on the address of the server.

24. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

sending a server data to the application proxy wherein the server data is derived from the one or more data packets from the server connection.

25. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a security or service policy.

26. The non-transitory computer-readable storage medium of claim 17, wherein the receiving one or more data packets from the server connection further comprises:

processing the one or more data packets from the server connection based on a protocol format associated to the application proxy.

27. The non-transitory computer-readable storage medium of claim 17, further comprising:

receiving client transmit data from the application proxy; and

sending the client transmit data to the server connection.

28. The non-transitory computer-readable storage medium of claim 27, wherein the client transmit data is sent to the server connection as one or more data packets.

29. The non-transitory computer-readable storage medium of claim 17, further comprising:

receiving server transmit data from the application proxy; and

sending the server transmit data to the client connection.

30. The non-transitory computer-readable storage medium of claim 29, wherein the server transmit data is sent to the client connection as one or more data packets.

31. The non-transitory computer-readable storage medium of claim 17, wherein the client connection or the server connection is an TCP connection.

32. The non-transitory computer-readable storage medium of claim 17, wherein the application is one of a TCP application, a secure TCP application, a HTTP application, a secure HTTP application, a SIP application, or a secure SIP application.