Packet relay processing apparatus

• US 7,107,348 B2
• Filed: 01/28/2002
• Issued: 09/12/2006
• Est. Priority Date: 03/27/2001
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yokoyama, Ken, Shimada, Kuniaki, Kawasaki, Takeshi, Kurita, Toshihiko, Kageyama, Hiroyasu, Takaba, Koichi, Katsuyama, Tsuneo
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): NANO, SARGON N
• Application Number:
  US10/056,091
• Publication Number:
  US 20020143955A1
• Time in Patent Office: 1,688 Days
• Field of Search: 709/227, 709/228, 709/229, 709/238, 709/239, 370/218, 370/392
• US Class Current: 709/229
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1012 based on compliance of requirements or conditions with available server resources
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.

Claims

1. A packet relay processing apparatus having a network connecting device, wherein

the network connecting device comprises

a session managing unit managing a session,

a packet processing unit relaying a packet based on session management made by said session managing unit;

a process distributing unit,

a plurality of service processing units;

said process distributing unit distributes a packet to at least one of said plurality of service processing units based on contents of a service for the packet; and

a service processing unit to which the packet is distributed performs a service process for the packet;

a session table storing session information about a session, and

a policy table storing a policy which describes a rule for executing a service for a packet;

said session managing unit searches said session table by using information included in the packet as a search key, upon receipt of the packet;

if corresponding session information is not registered to said session table as a result of the search, said session managing unit obtains a corresponding policy from said policy table by using the information included in the packet as a search key, and writes session information to said session table based on the obtained policy; and

if corresponding information is registered to said session table as a result of the search, said session managing unit manages the session information stored in said session table based on a state of the session.

2. The packet relay processing apparatus according to claim 1, further having a server, wherein

the server comprises

a service controlling unit writing a policy to said policy table.

3. The packet relay processing apparatus according to claim 2, wherein

the network connecting device transfers at least part of a packet to the server in order to record a log of the packet.

4. The packet relay processing apparatus according to claim 2, wherein:

the session information includes server transfer instruction information indicating whether or not to transfer a packet to the server; and

said process distributing unit determines whether or not to transfer the packet to the server based on the server transfer instruction information.

5. The packet relay processing apparatus according to claim 4, wherein

said packet details analyzing unit writes an applied service type for a packet, IP address and port number for translation, and sequence number and ACK number differences to said session table by analyzing the packet.

6. The packet relay processing apparatus according to claim 1, wherein

the search key used when said session table is searched includes destination and source IP addresses, a protocol, destination and source port numbers, and an input interface of an IP packet.

7. The packet relay processing apparatus according to claim 1, wherein

said session table stores as entries a search key, a session state, an applied service type, and information specific to the applied service type.

8. The packet relay processing apparatus according to claim 1, wherein

said policy table stores as entries destination and source IP addresses, a protocol, destination and source port numbers, an applied service type, and information specific to the applied service type, and a priority of an IP packet.

9. The packet relay processing apparatus according to claim 1, wherein

a plurality of policies are divided into a plurality of groups;

and

the network connecting device sets whether or not each policy is valid for each of the plurality of groups.

10. The packet relay processing apparatus according to claim 9, wherein

the part of the packet is a header of the packet.

11. A storage medium on which is recorded a program for causing a computer comprised as a network connecting device to execute a process, the process comprising:

managing a session;

relaying a packet based on session management;

storing session information about a session, and

storing a policy which describes a rule for executing a service for a packet;

searching said session table by using information included in the packet as a search key, upon receipt of the packet;

if corresponding session information is not registered to said session table as a result of the search, obtaining a corresponding policy from said policy table by using the information included in the packet as a search key, and writes session information to said session table based on the obtained policy; and

if corresponding information is registered to said session table as a result of the search, managing the session information stored in said session table based on a state of the session.

12. The storage medium according to claim 11, the process further comprising:

transferring session information about the session to a server connected to the network connecting device depending on a predetermined condition in order to make the server manage the session.

13. The storage medium according to claim 11, the process further comprising:

distributing a packet to a device or a program segment, which performs a process corresponding to a service, based on contents of a service for the packet.

14. The storage medium according to claim 11, the process further comprising:

transferring a packet to a server connected to the network connecting device depending on a given condition in order to make the server perform a service process for the packet.

15. The storage medium according to claim 11, the process further comprising:

transferring a packet to a server connected to the network connecting device in order to make the server determine a service for the packet; and

processing the packet based on contents of a determined service after the service for the packet is determined by the server.