OPTIMIZING NETWORK TRAFFIC BY TRANSPARENTLY INTERCEPTING A TRANSPORT LAYER CONNECTION AFTER CONNECTION ESTABLISHMENT

• US 20170171045A1
• Filed: 12/11/2015
• Published: 06/15/2017
• Est. Priority Date: 12/11/2015
• Status: Abandoned Application

• Current Assignee: Riverbed Technology Incorporated
• Original Assignee: Riverbed Technology Incorporated
• Inventors: Ly, Kand
• Application Number:
  US14/967,045
• Publication Number:
  US 20170171045A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/326 in the transport layer [OSI layer 4] H04L69/16 takes precedence

Abstract

Systems and techniques are described for optimizing network traffic by transparently intercepting a transport layer connection after connection establishment. Specifically, an intermediary device can monitor communications between two computers while a transport layer connection that uses a transport layer protocol is being established between the two computers. While monitoring communications, the intermediary device can save transport layer protocol state information associated with the transport layer connection that is being established. The intermediary device can then use the saved transport layer protocol state information to transparently intercept the transport connection.

Claims

1. A method for optimizing network traffic by transparently intercepting a transport layer connection after connection establishment, the method comprising:

a first intermediary device monitoring communications between a first computer and a second computer while a transport layer connection that uses a transport layer protocol is being established between the first computer and the second computer, wherein the first intermediary device saves transport layer protocol state information associated with the transport layer connection during said monitoring;

after the transport layer connection has been established between the first computer and the second computer, the first intermediary device analyzing at least one application layer message that is sent over the transport layer connection; and

the first intermediary device determining if the transport layer connection is to be optimized based on a result of said analyzing, and if so,

the first intermediary device transparently intercepting the transport layer connection at the first intermediary device by using the saved transport layer protocol state information associated with the transport layer connection,

the first intermediary device establishing an inner connection between the first intermediary device and a second intermediary device,

the first intermediary device receiving first network traffic sent from the first computer to the second computer over the transport layer connection,

the first intermediary device optimizing the first network traffic, and

the first intermediary device sending the optimized first network traffic to the second intermediary device over the inner connection.

2. The method of claim 1, wherein all network traffic between the first computer and the second computer passes through the first intermediary device and the second intermediary device.

3. The method of claim 2, wherein the first computer is a client computer, the second computer is a server computer, the first intermediary device is a client-side wide area network (WAN) accelerator, and the second intermediary device is a server-side WAN accelerator.

4. The method of claim 1, wherein the at least one application layer message includes a server hostname, and wherein said analyzing the at least one application layer message comprises determining if network traffic to the server hostname is to be optimized.

5. The method of claim 4, wherein the at least one application layer message is a Hypertext Transfer Protocol (HTTP) request message.

6. The method of claim 4, wherein the at least one application layer message is a Secure Sockets Layer (SSL) client hello message.

7. The method of claim 4, wherein the at least one application layer message is a proxy connect request message.

8. The method of claim 1, wherein during said monitoring, the first intermediary device saves an initial transport layer protocol state that corresponds to an initial transport layer protocol state of a transport layer protocol stack on the second computer, wherein the first intermediary device temporarily stores transport layer packets that are sent over the transport layer connection, and wherein transparently intercepting the transport layer connection comprises:

setting a state of a transport layer protocol stack on the first intermediary device based on the saved initial transport layer protocol state; and

replaying the stored transport layer packets to the transport layer protocol stack on the first intermediary device, thereby putting the transport layer protocol stack on the first intermediary device in a same state as the transport layer protocol stack of the second computer.

9. The method of claim 1, further comprising:

the second intermediary device reconstructing the first network traffic based on the optimized first network traffic; and

the second intermediary device sending the reconstructed first network traffic to the second computer.

10. The method of claim 9, further comprising:

the second intermediary device receiving second network traffic from the second computer;

the second intermediary device optimizing the second network traffic;

the second intermediary device sending the optimized second network traffic to the first intermediary device over the inner connection;

the first intermediary device reconstructing the second network traffic based on the optimized second network traffic; and

the first intermediary device sending the reconstructed second network traffic to the first computer over the transport layer connection.

11. A first intermediary device, comprising:

a processor; and

a non-transitory storage medium storing instructions that, when executed by the processor, cause the first intermediary device to perform a method for optimizing network traffic by transparently intercepting a transport layer connection after connection establishment, the method comprising;

monitoring communications between a first computer and a second computer while a transport layer connection that uses a transport layer protocol is being established between the first computer and the second computer;

saving transport layer protocol state information associated with the transport layer connection during said monitoring;

after the transport layer connection has been established between the first computer and the second computer, analyzing at least one application layer message that is sent over the transport layer connection; and

determining if the transport layer connection is to be optimized based on a result of said analyzing, and if so,

transparently intercepting the transport layer connection at the first intermediary device by using the saved transport layer protocol state information associated with the transport layer connection,

establishing an inner connection between the first intermediary device and a second intermediary device,

receiving first network traffic sent from the first computer to the second computer over the transport layer connection,

optimizing the first network traffic, and

sending the optimized first network traffic to the second intermediary device over the inner connection.

12. The first intermediary device of claim 11, wherein all network traffic between the first computer and the second computer passes through the first intermediary device and the second intermediary device.

13. The first intermediary device of claim 12, wherein the first computer is a client computer, the second computer is a server computer, the first intermediary device is a client-side wide area network (WAN) accelerator, and the second intermediary device is a server-side WAN accelerator.

14. The first intermediary device of claim 11, wherein the at least one application layer message includes a server hostname, and wherein said analyzing the at least one application layer message comprises determining if network traffic to the server hostname is to be optimized.

15. The first intermediary device of claim 14, wherein the at least one application layer message is a Hypertext Transfer Protocol (HTTP) request message.

16. The first intermediary device of claim 14, wherein the at least one application layer message is a Secure Sockets Layer (SSL) client hello message.

17. The first intermediary device of claim 14, wherein the at least one application layer message is a proxy connect request message.

18. The first intermediary device of claim 11, wherein saving transport layer protocol state information comprises saving an initial transport layer protocol state that corresponds to an initial transport layer protocol state of a transport layer protocol stack on the second computer.

19. The first intermediary device of claim 18, wherein the method further comprises storing transport layer packets that are sent over the transport layer connection.

20. The first intermediary device of claim 19, wherein transparently intercepting the transport layer connection comprises:

setting a state of a transport layer protocol stack on the first intermediary device based on the saved initial transport layer protocol state; and

replaying the stored transport layer packets to the transport layer protocol stack on the first intermediary device, thereby putting the transport layer protocol stack on the first intermediary device in a same state as the transport layer protocol stack of the second computer.

21. A non-transitory storage medium storing instructions that, when executed by a network accelerator, cause the network accelerator to perform a method for optimizing network traffic by transparently intercepting a transport layer connection after connection establishment, the method comprising:

monitoring communications between a first computer and a second computer while a transport layer connection that uses a transport layer protocol is being established between the first computer and the second computer;

saving transport layer protocol state information associated with the transport layer connection during said monitoring;

after the transport layer connection has been established between the first computer and the second computer, analyzing at least one application layer message that is sent over the transport layer connection; and

determining if the transport layer connection is to be optimized based on a result of said analyzing, and if so,

transparently intercepting the transport layer connection at the first intermediary device by using the saved transport layer protocol state information associated with the transport layer connection,

establishing an inner connection between the first intermediary device and a second intermediary device,

receiving first network traffic sent from the first computer to the second computer over the transport layer connection,

optimizing the first network traffic, and

sending the optimized first network traffic to the second intermediary device over the inner connection.