APPLICATION ACCELERATION AS A SERVICE SYSTEM AND METHOD

• US 20160014079A1
• Filed: 09/23/2015
• Published: 01/14/2016
• Est. Priority Date: 07/17/2009
• Status: Active Grant

• Current Assignee: Aryaka Networks
• Original Assignee: Aryaka Networks
• Inventors: Bharadhwaj, Rajeev, Gupta, Ajit, Nagaraj, Ashwath
• Granted Patent: US 9,832,170 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC

Abstract

Disclosed are systems and methods to provide application acceleration as a service. In one embodiment, a system includes a head office to serve an enterprise application comprised of a collaborative document. The system also includes a branch office to request the collaborative document from the head office. The enterprise application may also include a computed document and/or a static document. In addition, the system also includes a set of Point of Presence (POP) locations between the head office and the branch office to communicate the collaborative document, the computed document and the static document on behalf of the head office from a closest POP location to the head office to a closest POP location to the branch office and then onward to the branch office.

Claims

1. A system comprising:

a requesting entity;

a Wide Area Network (WAN);

a serving entity configured to serve an application comprising at least one of a collaborative document, a computed document generated at runtime, and a static document prepared a priori, wherein the application is configured to be shared with the requesting entity in accordance with a request therefor,

wherein the serving entity and the requesting entity are configured to communicate through the WAN; and

a network of a number of Point of Presence (POP) locations between the serving entity and the requesting entity,

wherein the network of the number of POP locations is configured to communicate at least one of the collaborative document, the computed document, and the static document on behalf of the serving entity from a closest POP location to the serving entity to a closest POP location to the requesting entity and then onward to the requesting entity,

wherein each of the number of POP locations comprises a switching engine and an edge engine implemented therein to provide a WAN optimization and an application acceleration during a communication of at least one of the collaborative document, the computed document, and the static document on behalf of the serving entity,

wherein the switching engine and the edge engine are configured to enable a multi-tenancy in each of the number of POP locations,

wherein a resource allocation for the switching engine and the edge engine is on a per-customer basis,

wherein the switching engine and the edge engine are scalable with a number of load balancers,

wherein a WAN optimization capability and an application acceleration capability of each of the number of POP locations enable a distribution of a number of tasks associated therewith across the WAN,

wherein at least one of the serving entity and the requesting entity is configured to generate a secure transport data to be transmitted over a number of secure tunnels of at least one of the collaborative document, the computed document, and the static document between a number of intervening firewalls such that a traffic is routed securely through the network of the number of POP locations toward a destination,

wherein the network of the number of POP locations is implemented with a multi-segment architecture, and

wherein the number of secure tunnels comprises a private transport of a packet with an unaltered Internet Protocol (IP) address through at least one of a Generic Routing Encapsulation (GRE), an Internet Protocol Security (IPsec), a Multiprotocol Label Switching (MPLS), and a Virtual Local Area Network (VLAN),

wherein the collaborative document is accessible and simultaneously modifiable by a plurality of users at the requesting entity.

2. The system of claim 1:

wherein at least one of;

the application comprises an internal application of an enterprise,

the serving entity and the requesting entity are configured to securely access the application through a private network using at least one of a number of public addresses of a number of source routers along with a number of destination routers, a number of pools of a number of addresses represented by the number of intervening firewalls, a Multiprotocol Label Switching (MPLS) label, and a Virtual Local Area Network (VLAN) tag, and

the application is configured to be executed at any of the number of POP locations of the network of the number of POP locations.

3. The system of claim 1, further comprising:

a Customer Premise Equipment (CPE) device and a router coupled to at least one of the serving entity and the requesting entity, wherein the CPE device and the router are configured to at least one of;

perform an Advanced Redundancy Removal (ARR) function to avoid transmitting a duplicate information in at least one of a transport stream and a packet stream,

perform a number of Transmission Control Protocol (TCP) proxies, wherein a number of varying policies are used for at least one of a number of TCP windows, a buffering, and a security,

perform a number of protocol dependent split proxies on at least one of the transport stream and the packet stream,

generate the secure transport data to be transmitted over the number of secure tunnels of at least one of the collaborative document, the computed document, and the static document, and

communicate the secured transport data between a client device in the requesting entity and an other client device in the serving entity through the number of secure tunnels between the number of intervening firewalls.

4. The system of claim 3:

wherein the CPE device is further configured to at least one of;

resolve a first bandwidth limitation in a first link between the closest POP location to the requesting entity and the requesting entity along with reduce a communication time of at least one of the collaborative document, the computed document, and the static document in the first link between the closest POP location to the requesting entity and the requesting entity, and

resolve a second bandwidth limitation in a second link between the closest POP location to the serving entity and the serving entity along with reduce the communication time of at least one of the collaborative document, the computed document, and the static document in the second link between the closest POP location to the serving entity and the serving entity.

5. The system of claim 3, further comprising:

a storage associated with at least one of the network of the number of POP locations and the CPE device to reduce an amount of data flow when the ARR function is performed,

wherein the storage comprises at least one of a flash device, a solid state device, and a hard drive.

6. The system of claim 3, further comprising:

a public server configured to generate at least one of the computed document and the static document,

wherein the requesting entity is configured to request at least one of the computed document and the static document from the serving entity through at least one of the transport stream and the packet stream, and

wherein the network of the number of POP locations is configured to route at least one of the transport stream and the packet stream on behalf of the public server from a closest POP location to the public server to the closest POP location to the requesting entity to the requesting entity.

7. The system of claim 6, further comprising at least one of:

a plurality of serving entities, a plurality of public servers, and a plurality of requesting entities.

8. The system of claim 6:

wherein the serving entity and the requesting entity are configured to communicate with each other through at least one of the private network and a public network, and

wherein the public server and the requesting entity are also configured to communicate with each other through at least one of the private network and the public network.

9. The system of claim 8:

wherein the computed document is generated based on a recent interaction between the public server and the requesting entity during a secure session of the public network.

10. The system of claim 1:

wherein the network of the number of POP locations is shared by a plurality of licensed entities of an application acceleration service,

wherein each of the plurality of licensed entities has a number of serving entities and a number of requesting entities, and

wherein each of the plurality of licensed entities leverages a shared software infrastructure and a shared hardware infrastructure of a service provider associated with the application acceleration service.

11. The system of claim 1:

wherein an alternate path is used to route at least one of the transport stream and the packet stream that comprises at least one of the collaborative document, the computed document, and the static document between the serving entity and the requesting entity when a routing through the closest POP location to the requesting entity is undesirable due to at least one of a network congestion, a service unavailability, and a segment policy.

12. The system of claim 1:

wherein the requesting entity is configured to access an external service without communicating through the serving entity when a request to access the external service is communicated from the requesting entity directly to a particular POP location closest to the external service.

13. The system of claim 3:

wherein a compression for a communication segment between each of the number of POP locations of the network of the number of POP locations is variable based on a path segment policy between each of the number of POP locations of the network of the number of POP locations, the CPE, and the serving entity.

14. A system comprising:

a number of serving entities;

a WAN;

a number of requesting entities configured to communicate with the number of serving entities through the WAN;

a network of a number of POP locations geographically proximate to the number of serving entities and the number of requesting entities,

wherein each of the number of POP locations comprises a switching engine and an edge engine implemented therein to provide a WAN optimization and an application acceleration during a communication of at least one of a collaborative document, a computed document, and a static document of an application served through the number of serving entities to a POP location closest to a requesting entity,

wherein the switching engine and the edge engine are configured to enable a multi-tenancy in each of the number of POP locations,

wherein a resource allocation for the switching engine and the edge engine is on a per-customer basis,

wherein the switching engine and the edge engine are scalable with a number of load balancers,

wherein a WAN optimization capability and an application acceleration capability of each of the number of POP locations enable a distribution of a number of tasks associated therewith across the WAN,

wherein the collaborative document is accessible and simultaneously modifiable by a plurality of users at the number of requesting entities,

wherein the computed document is generated at runtime,

wherein the static document is prepared a priori, and

wherein the network of the number of POP locations is implemented with a multi-segment architecture; and

a CPE device of at least one of the serving entity and the requesting entity, wherein the CPE device is configured to;

perform an ARR function on at least one of the collaborative document, the static document, and the computed document,

perform a number of TCP proxies with a number of varying policies for at least one of a number of TCP windows, a buffering, and a security,

perform a number of protocol dependent split proxies on at least one of a transport stream and a packet stream associated with at least one of the collaborative document, the computed document, and the static document, and

generate a secure transport data to be transmitted over a number of secure tunnels of at least one of the collaborative document, the computed document, and the static document between a number of intervening firewalls such that a traffic is routed securely through the network of the number of POP locations toward a destination,

wherein the ARR function enables an avoidance of a transmission of a duplicate information in at least one of the transport stream and the packet stream.

15. A method comprising:

providing a capability to communicate between a serving entity and a requesting entity through a WAN;

serving, through a processor, an application comprising at least one of a collaborative document, a computed document generated at runtime, and a static document prepared a priori from the serving entity to the requesting entity in accordance with an appropriate request from the requesting entity;

communicating at least one of the collaborative document, the computed document, and the static document through a network of a number of POP locations based on at least one of a transport stream and a packet stream on behalf of the serving entity from a closest POP location to the serving entity to the closest POP location to the requesting entity and then onward to the requesting entity;

providing a WAN optimization capability and an application acceleration capability across the WAN during a communication of at least one of the collaborative document, the computed document, and the static document on behalf of the serving entity through the network of the number of POP locations by implementing each of the number of POP locations with a switching engine and an edge engine therein,

wherein the switching engine and the edge engine are configured to enable a multi-tenancy in each of the number of POP locations,

wherein a resource allocation for the switching engine and the edge engine is on a per-customer basis, and

wherein the switching engine and the edge engine are scalable with a number of load balancers;

generating, through at least one of the serving entity and the requesting entity, a secure transport data to be transmitted over a number of secure tunnels of at least one of the collaborative document, the computed document, and the static document between a number of intervening firewalls such that a traffic is routed securely through the network of the number of POP locations toward a destination,

wherein the number of secure tunnels comprises a private transport of a packet with an unaltered IP address through at least one of a GRE, an IPsec, a MPLS, and a VLAN; and

implementing the network of the number of POP locations with a multi-segment architecture,

wherein the collaborative document is accessible and simultaneously modifiable by a plurality of users at the requesting entity.