Web server employing multi-homed, modular framework

• US 6,647,422 B2
• Filed: 11/10/1998
• Issued: 11/11/2003
• Est. Priority Date: 02/26/1996
• Status: Expired due to Fees

• Current Assignee: Telaxian Technologies Incorporated
• Original Assignee: Network General Technology
• Inventors: Wesinger, Jr., Ralph E., Coley, Christopher D.
• Primary Examiner(s): Burgess, Glenton B.
• Assistant Examiner(s): EDELMAN, BRADLEY E
• Application Number:
  US09/189,697
• Publication Number:
  US 20010011304A1
• Time in Patent Office: 1,827 Days
• Field of Search: 709/219, 709/203, 709/105, 709/227, 709/228, 709/220
• US Class Current: 709/228
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A Web server is provided having a multi-homed, modular framework. The modular framework allows extensions to the Web server to be easily compiled into the Web server, allowing the extensions to run natively as part of the server instead of incurring the overhead typical of CGI scripts, for example. The multi-homing capabilities of the Web server provide the appearance to Web users of multiple distinct and independent servers, allowing a small company or individual to create the same kind of Web presence enjoyed by larger companies. In effect, multiple virtual servers run on the same physical machine. The Web server as a whole is easily extensible to allow additional capabilities to be provided natively within the Web server itself. Furthermore, each virtual server is independently configurable in order to turn different capabilities on or off or to modify operation of the virtual server. The Web server is also provided with enhanced security features, built-in animation capability, and other features that afford maximum flexibility and versatility.

Claims

1. A computer executing a Web server program, comprising:

a plurality of virtual hosts accessible using connection requests passed over a computer network, each of the virtual hosts being identified by a corresponding virtual host identifier includable in a connection request;

a plurality of executable modules, each of the modules defining a predetermined function;

a plurality of configuration sub-files corresponding to the virtual hosts, each of the configuration sub-files defining which of the executable module functions are usable by a corresponding one of the virtual hosts.

2. The computer of claim 1, wherein the configuration sub-files are included in a master configuration file.

3. The computer of claim 1, further comprising:

a plurality of log files corresponding to the virtual hosts.

4. The computer of claim 1, further comprising:

means for creating a log entry identifying at least one of the virtual hosts accessed by a connection request.

5. A computer executing a server software program, comprising:

a plurality of executable software modules associated with a plurality of file extensions, each of the software modules defining a predetermined function;

means for receiving a request from a remote host, the request including a file extension and a virtual machine identifier;

a defaults file, listing the file extensions of the executable software modules, usable for matching the file extension included in the request to at least one of the software modules; and

a configuration file for defining which of the executable software modules are available based on the virtual machine identifier.

6. The computer of claim 5, wherein the configuration file is included in a master configuration file having a plurality of portions corresponding to a plurality of virtual machines.

7. The computer of claim 5, further comprising;

an access rules database for governing access to at least one virtual machine.

8. The computer of claim 7, wherein the access rules database includes a deny portion and an access portion.

9. The computer of claim 7, wherein the access rules database includes time restrictions for limiting access the at least one virtual machine.

10. The computer of claim 7, wherein the access rules database includes at least one entry specifying an accessing machine by domain name or internet protocol (IP) address.