Packet relay processing apparatus

• US 7,433,958 B2
• Filed: 04/11/2006
• Issued: 10/07/2008
• Est. Priority Date: 03/27/2001
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yokoyama, Ken, Shimada, Kuniaki, Kurita, Toshihiko, Kawasaki, Takeshi, Kageyama, Hiroyasu, Takaba, Koichi, Katsuyama, Tsuneo
• Primary Examiner(s): Etienne; Ario
• Assistant Examiner(s): Nano; Sargon N
• Application Number:
  US11/279,338
• Publication Number:
  US 20060168328A1
• Time in Patent Office: 910 Days
• Field of Search: 709/227, 709/228, 709/229, 709/238, 709/239, 370/218, 370/392
• US Class Current: 709/229
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1012 based on compliance of requirements or conditions with available server resources
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.

Claims

1. A packet relay processing apparatus having a network connecting device as a network adapter, wherein

the network connecting device comprises:

session managing unit managing a session;

a packet processing unit relaying a packet based on session management made by said session managing unit;

a routing table storing routing information about a routing destination of the packet;

a routing processing unit determining the routing destination of the packet based on the routing information at the start of the session;

a process distributing unit; and

a plurality of service processing units, wherein

said packet processing unit outputs the packet to the routing destination,

said process distributing unit distributes the packet to at least one of the plurality of service processing units based on contents of a service for the packet,

the service processing unit to which the packet is distributed performs a service process for the packet,

said session managing unit searches a session table, in which the session information about the session above is stored, by using information included in the packet as a search key, upon receipt of the packet,

if corresponding session information is not registered to said session table as a result of the search, said session managing unit obtains a corresponding policy from a policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key, and writes session information to said session table based on the obtained policy, and

if corresponding information is registered to said session table as a result of the search, said session managing unit manages the session information stored in said session table based on a state of the session.

2. The packet relay processing apparatus according to claim 1, further having a server, wherein the server comprises a network controlling unit writing routing information to said routing table.

3. The packet relay processing apparatus according to claim 1, further having a server, wherein:

the server comprises

an external session managing unit managing a session;

said session managing unit transfers session information about a session depending on a given condition; and

said external session managing unit manages the session based on received session information.

4. The packet relay processing apparatus according to claim 1, further having a server, wherein:

the server comprises an external service processing unit;

said process distributing unit transfers a packet to the server depending on a given condition; and

said external service processing unit performs a service process for a received packet.

5. The packet relay processing apparatus according to claim 1, further having a server, wherein:

the server comprises a packet details analyzing unit;

the network connecting device further comprises

a process distributing unit, and

a plurality of service processing units;

said process distributing unit transfers a packet to said packet details analyzing unit depending on a given condition; and

said packet details analyzing unit determines contents of a service for the packet by analyzing the packet and sets the determined contents of the service in the network connecting device; and

the network connecting device processes the packet based on the contents of the determined service, after the contents of the service are set.

6. The packet relay processing apparatus according to claim 5, wherein

if a packet transferred to the sewer is an HTTP protocol GET packet, said packet details analyzing unit determines a service for the packet based on a URL (Uniform Resource Locator) included in the packet.

7. The packet relay processing apparatus according to claim 5, wherein

if a packet transferred to the server is an ACK packet for an FTP protocol PORT or PASV command, said packet details analyzing unit determines a service for the packet based on IP address and port number of a data connection corresponding to a session.

8. The packet relay processing apparatus according to claim 5, wherein

said packet details analyzing unit makes a reply instead of a distribution destination server until the distribution destination of a load on the server is determined, if a process for distributing a load on the server is performed.

9. The packet relay processing apparatus according to claim 1 wherein said service processing unit has a capability for rewriting a header of a packet.

10. The packet relay processing apparatus according to claim 1 wherein said service processing unit has a capability for discarding a packet.

11. The packet relay processing apparatus according to claim 1, further having a server, wherein

said service processing unit has a capability for determining a distribution destination of a load in order to distribute a load on the server.

12. The packet relay processing apparatus according to claim 1, wherein

said session managing unit waits for a predetermined time period from a termination of a session, and deletes session information about the terminated session unless the terminated session is resumed while waiting for the predetermined time period.

13. The packet relay processing apparatus according to claim 1, wherein

the network connecting device further comprises

a counter for obtaining statistical information about a packet.

14. A network connecting device as a network adapter for use in a packet relay processing apparatus, comprising:

a session managing unit managing a session;

a packet processing unit relaying a packet based on session management made by said session managing unit;

a routing table storing routing information about a routing destination of the packet;

a routing processing unit determining the routing destination of the packet based on the routing information at the start of the session;

a process distributing unit; and

a plurality of service processing units, wherein

said packet processing unit outputs the packet to the routing destination,

said process distributing unit distributes the packet to at least one of the plurality of service processing units based on contents of a service for the packet,

the service processing unit to which the packet is distributed performs a service process for the packet,

said session managing unit searches a session table, in which the session information about the session above is stored, by using information included in the packet as a search key, upon receipt of the packet,

if corresponding session information is not registered to said session table as a result of the search, said session managing unit obtains a corresponding policy from a policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key, and writes session information to said session table based on the obtained policy, and

if corresponding information is registered to said session table as a result of the search, said session managing unit manages the session information stored in said session table based on a state of the session.

15. The network connecting device according to claim 14, further comprising

a server transferring unit transferring session information about a session to a server comprised in the packet relay processing apparatus depending on a given condition, wherein

the server manages the session according to the transferred session information.

16. The network connecting device according to claim 14, further comprising

a process distributing unit, and

a service processing unit, wherein

said process distributing unit transfers a packet to the server comprised in the packet relay processing apparatus depending on a given condition in order to make the server determine a service for the packet;

and

the service processing unit processes a packet of the session based on contents of the service determined by the server, after the service is determined by the server.

17. A computer readable storage medium on which is recorded a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, wherein

a policy is set in a network connecting device as a network adapter, so that the network connecting device comprised in the packet connecting processing apparatus managing a session, relaying the packet based on the session management, determining the routing destination of the packet based on the routing information at the start of the session, outputting the packet to the routing destination if relaying the packet, distributing the packet based on contents of a service for the packet, performing a service process for the distributed packet executes a process, the processes comprising

searching a session table which the session information about the session above is stored, by using information included in the packet as a search key, upon, receipt of the packet,

obtaining a corresponding policy from a policy table, in which the policy containing the regulations for performing service towards the packet is store, by using the information included in the packet as a search key, and writing session information to said session table based on the obtained policy, if corresponding session information is not registered to said session table as a result of the search;

and

managing the session information stored in said session table based on a state of the session if corresponding information is registered to said session table as a result of the search.

18. The storage medium according to claim 17, the process further comprising

receiving a packet transferred from the network connecting device, and executing the service for the received packet.

19. A computer readable storage medium on which is recorded a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the process comprising:

receiving the packet transferred from a network connecting device as a network adapter comprised in the packet relay processing apparatus, managing a session, relaying the packet based on the session management, determining the routing destination of the packet based on the routing information at the start of the session, outputting the packet to the routing destination if relaying the packet, distributing the packet based on contents of a service for the packet, performing a service process for the distributed packet, searching a session table, in which the session information about the session above is stored, by using information included in the packet as a search key upon receipt of the packet, obtaining a corresponding policy from a policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key and writing session information to said session table based on the obtained policy if corresponding session information is not registered to said session table as a result of the search, managing the session information stored in said session table based on a state of the session if corresponding information is registered to said session table as a result of the search;

determining contents of a service for the packet by analyzing the packet; and

setting the contents of the determined service in the network connecting device in order to make the network connecting device process the packet based contents of the determined service.

20. A computer readable storage medium on which is recorded data carried on a communication line and representing a program for causing a computer comprised in a network connecting device as a network adapter to execute a process, the process comprising:

managing a session;

relaying a packet based on session management;

determining the routing destination of the packet based on the routing information at the start of the session;

outputting the packet to the routing destination if relaying the packet;

distributing the packet based on contents of a service for the packet;

performing a service process for the distributed packet;

searching said session table, in which the session information about the session above is stored, by using information included in the packet as a search key, upon receipt of the packet in the management of the session;

obtaining a corresponding policy from said policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key and writing session information to said session table based on the obtained policy if corresponding session information is not registered to said session table as a result of the search; and

managing the session information stored in said session table based on a state of the session if corresponding information is registered to said session table as a result of the search.

21. A computer readable storage medium on which is recorded data carried on a communication line and representing a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the program, wherein

a policy is set in a network connecting device as a network adapter so that the network connecting device that configures the packet relay processing apparatus managing a session, relaying the packet based on the session management, determining the routing destination of the packet based on the routing information at the start of the, session, outputting the packet to the routing destination if relaying the packet, distributing the packet based on contents of a service for the packet, performing a service process for the distributed packet executes a process, the processes comprising:

searching said session table, in which the session information about the session above is stored, by using information included in the packet as a search key, upon receipt of the packet;

obtaining a corresponding policy from said policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key, and writing session information to said session table based on the obtained policy, if corresponding session information is not registered to said session table as a result of the search; and

managing the session information stored in said session table based on a state of the session if corresponding information is registered to said session table as a result of the search.

22. A computer readable storage medium on which is recorded data carried on a communication line and representing a program for causing a server, which configures a packet relay processing apparatus relaying a packet, to execute a process, the program comprising:

receiving the packet transferred from a network connecting device as a network adapter comprised in the packet relay processing apparatus, managing a session, relying the packet based on the session management, determining the routing destination of the packet based on the routing information at the start of the session, outputting the packet to the routing destination if relaying the packet, distributing the packet based on contents of a service for the packet, performing a service process for the distributed packet, searching said session table, in which the session information about the session above is stored, by using information included in the packet as a search key

upon receipt of the packet, obtaining a corresponding policy from said policy table, in which the policy containing the regulations for performing service towards the packet is stored, by using the information included in the packet as a search key and writing session information to aid session table based on the obtained policy if corresponding session information is not registered to said session table as a result of the search, managing the session information stored in said session table based on a state of the session if corresponding information is registered to said session as a result of the search;

determining contents of a service for the packet by analyzing the packet; and

setting the contents of the determined service in the network connecting device in order to make the network connecting device process the packet based on the contents of the determined service.