Double-proxy remote data access system

• US 7,711,788 B2
• Filed: 04/20/2006
• Issued: 05/04/2010
• Est. Priority Date: 08/01/2001
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Actona Technologies Limited (Cisco Systems, Inc.)
• Inventors: Kaminsky, Daniel, Glixman, Shahar, Lev Ran, Etai, Cidon, Israel, Zach, Idan, Bortnikov, Vita, Ben Kiki, Danit, Ben Shaul, Israel Z.
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US11/408,260
• Publication Number:
  US 20070174428A1
• Time in Patent Office: 1,475 Days
• Field of Search: 709/201, 709/202, 709/213, 709/217, 709/219, 709/223, 709/226
• US Class Current: 709/213
• CPC Class Codes: G06F 16/1774 Locking methods, e.g. locking methods for file systems allowing shared and concurrent access to files
• CPC Class Codes: G06F 16/192 Implementing virtual folder structures
• CPC Class Codes: G06F 16/9574 of access to content, e.g. by caching
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/133 Protocols for remote procedure calls [RPC]
• CPC Class Codes: H04L 67/2876 Pairs of inter-processing entities at each side of the network, e.g. split proxies
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/5651 Reducing the amount or size of exchanged application data
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99952 Coherency, e.g. same view to multiple users

Abstract

A method for enabling access to a data resource, which is held on a file server (25) on a first local area network (LAN) (21a), by a client (28) on a second LAN (21b). A proxy receiver (48) on the second LAN (21b) intercepts a request for the data resource submitted by the client (28) and transmits a message via a wide area network (WAN) (29) to a proxy transmitter (52) on the first LAN (21a), requesting the data resource. The proxy transmitter (52) retrieves a replica of the data resource from the file server (25) and conveys the replica of the data resource over the WAN (29) to the proxy receiver (48), which serves the replica of the data resource from the proxy receiver (48) to the client (28) over the second LAN (21b).

Claims

1. A method for enabling access to a data resource, which is held on a file server on a first local area network (LAN), by a client on a second LAN, the method comprising:

intercepting a request for the data resource submitted by the client, using a proxy receiver on the second LAN;

transmitting a message via a wide area network (WAN) from the proxy receiver to a proxy transmitter on the first LAN, the proxy transmitter being separate from the proxy receiver, requesting the data resource;

performing a cross-file-system protocol translation between the proxy transmitter and the proxy receiver;

receiving at the proxy receiver a replica of the data resource transmitted over the WAN by the proxy transmitter, wherein the replica was retrieved by the proxy transmitter from the file server over the first LAN in response to the message; and

serving the replica of the data resource from the proxy receiver to the client over the second LAN.

2. A method according to claim 1, wherein receiving the replica of the data resource comprises receiving at least one of metadata relating to the data resource, an access list applicable to the data resource, and a permission applicable to the data resource.

3. A method according to claim 1, wherein the request for the data resource is received from the client in accordance with a native network file system protocol of the file server, and wherein transmitting the message comprises transmitting the message in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

4. A method according to claim 1, wherein the request for the data resource is submitted by the client in accordance with a native network file system protocol of the file server, and wherein receiving the replica comprises receiving the replica transmitted over the WAN in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

5. A method according to claim 4, wherein receiving the replica comprises concurrently receiving a plurality of blocks of the replica transmitted over the WAN via respective parallel connections.

13. A method according to claim 3, wherein transmitting the message comprises aggregating the message into a batch of messages, and transmitting the aggregated batch.

14. A method according to claim 1, and comprising receiving at the proxy receiver metadata regarding the data resource on the file server and, responsive to the metadata, presenting to the client a virtual directory of the file server.

15. A method according to claim 3, wherein the WAN transport protocol comprises a Transmission Control Protocol (TCP).

16. A method according to claim 1, wherein the request for the data resource is received from the client as a call to a native network file system used by the file server.

17. A method according to claim 4, wherein receiving the replica of the data resource comprises receiving a compressed replica over the WAN, and decompressing the compressed replica at the proxy receiver.

18. A method according to claim 17, wherein receiving the compressed replica of the data resource comprises receiving a delta-compressed replica of the data resource over the WAN.

19. A method according to claim 1, and comprising storing the replica of the data resource in a memory of the proxy receiver, and wherein serving the replica of the data resource from the proxy receiver comprises serving the replica of the data resource from the memory of the proxy receiver.

20. A method according to claim 19, and comprising:

intercepting a further request for the data resource from another client on the second LAN;

checking the memory to determine whether the replica of the data resource is present in the memory and valid; and

responsive to the further request and to determining that the replica is present and valid, serving the replica of the data resource from the memory of the proxy receiver to the other client over the second LAN.

21. A method according to claim 19, wherein intercepting the request comprises intercepting a group of one or more requests for first data resources on the file server, and comprising analyzing a pattern of the group of requests, and receiving at the proxy receiver and storing in the memory replicas of one or more second data resources transmitted over the WAN by the proxy transmitter, wherein the replicas were retrieved by the proxy transmitter from the file server responsive to the pattern.

22. A method according to claim 1, and comprising:

intercepting at the proxy receiver multiple write requests submitted by the client for application to the data resource;

aggregating the write requests in a write memory of the proxy receiver; and

transmitting the aggregated write requests together via the WAN from the write memory of the proxy receiver to the proxy transmitter.

6. Apparatus for enabling access to a data resource, which is held on a file server on a first local area network (LAN), by a client on a second LAN, which is coupled to the first LAN via a wide area network (WAN), the apparatus comprising a proxy receiver, which comprises:

a network interface configured to be coupled to the second LAN; and

a processor, which is configured to intercept a request for the data resource submitted by the client on the second LAN, and responsive to the request, to send, via the network interface, a message via the WAN to a proxy transmitter on the first LAN, requesting the data resource, to receive, via the network interface, a replica of the data resource transmitted over the WAN by the proxy transmitter, wherein the replica was retrieved by the proxy transmitter from the file server over the first LAN in response to the message, and to serve the replica of the data resource to the client over the second LAN.

7. Apparatus according to claim 6, wherein the processor is configured to intercept the request for the data resource submitted in accordance with a native network file system protocol of the file server, and to send the message in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

8. Apparatus according to claim 6, wherein the processor is configured to intercept the request for the data resource submitted in accordance with a native network file system protocol of the file server, and to receive the replica transmitted over the WAN in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

9. Apparatus according to claim 8, wherein the processor is configured to concurrently receive a plurality of blocks of the replica transmitted over the WAN via respective parallel connections.

23. Apparatus according to claim 6, wherein the replica of the data resource comprises at least one of metadata relating to the data resource, an access list applicable to the data resource, and a permission applicable to the data resource.

24. Apparatus according to claim 7, wherein the processor is configured to aggregate the message into a batch of messages and transmit the aggregated batch.

25. Apparatus according to claim 6, wherein the processor is configured to convey to the proxy receiver metadata regarding the data resource on the file server, and to present to the client a virtual directory of the file server, responsive to the metadata.

26. Apparatus according to claim 7, wherein the WAN transport protocol comprises a Transmission Control Protocol (TCP).

27. Apparatus according to claim 6, wherein the request for the data resource is received from the client as a call to a native network file system used by the file server.

28. Apparatus according to claim 8, wherein the processor is configured to receive a compressed replica over the WAN, and to decompress the compressed replica.

29. Apparatus according to claim 28, wherein the processor is configured to receive a delta-compressed replica of the data resource over the WAN.

30. Apparatus according to claim 6, wherein the proxy receiver comprises a memory, and wherein the processor is configured to store the replica of the data resource in the memory, and to serve the replica of the data resource from the memory.

31. Apparatus according to claim 30, wherein the processor is configured to:

intercept a further request for the data resource from another client on the second LAN,

check the memory to determine whether the replica of the data resource is present in the memory and valid, and

responsive to the further request and to determining that the replica is present and valid, serve the replica of the data resource from the memory to the other client over the second LAN.

32. Apparatus according to claim 30, wherein the processor is configured to:

intercept a group of one or more requests for first data resources on the file server,

analyze a pattern of the group of requests,

receive and store in the memory replicas of one or more second data resources transmitted over the WAN by the proxy transmitter, wherein the replicas were retrieved by the proxy transmitter from the file server responsive to the pattern.

33. Apparatus according to claim 6, wherein the proxy receiver comprises a write memory, wherein the processor is configured to intercept multiple write requests submitted by the client for application to the data resource, to aggregate the write requests in the write memory, and to transmit the aggregated write requests together via the WAN from the write memory to the proxy transmitter.

10. Apparatus for enabling access to a data resource which is held on a file server on a first local area network (LAN), by a client on a second LAN which is coupled to the first LAN via a wide area network (WAN), the apparatus comprising a proxy transmitter, which comprises:

a network interface configured to be coupled to the first LAN; and

a processor, which is configured to receive a message transmitted via the WAN to the proxy transmitter from a proxy receiver on the second LAN, the proxy transmitter being separate from the proxy receiver, in response to a request for the data resource submitted by the client and intercepted by the proxy receiver, and, in response to the message, to retrieve a replica of the data resource from the file server over the first LAN, to perform a cross-file-system protocol translation between the proxy transmitter and the proxy receiver, and to convey, via the network interface, the replica of the data resource over the WAN to the proxy receiver.

11. Apparatus according to claim 10, wherein the request for the data resource is submitted by the client in accordance with a native network file system protocol of the file server, and wherein the processor is configured to receive the message transmitted via the WAN from the proxy receiver in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

12. Apparatus according to claim 10, wherein the request for the data resource is submitted by the client in accordance with a native network file system protocol of the file server, and wherein the processor is configured to convey the replica of the data resource over the WAN to the proxy receiver in accordance with a WAN transport protocol different from the native network file system protocol of the file server.

34. A computer software product for enabling access to a data resource which is held on a file server on a first local area network (LAN), by a client on a second LAN which is coupled to the first LAN via a wide area network (WAN), the product comprising a computer-readable medium in which program instructions are stored, which instructions, when read by a first computer on the first LAN, cause the first computer to operate as a proxy transmitter, so as to retrieve a replica of the data resource from the file server over the first LAN, and which instructions, when read by a second computer on the second LAN, cause the second computer to operate as a proxy receiver, the first computer acting as the proxy transmitter being separate from the second computer acting as the proxy receiver, so as to intercept a request for the data resource submitted by the client on the second LAN;

responsive to the request, to send a message via the WAN to a proxy transmitter on the first LAN, requesting the data resource;

to perform a cross-file-system protocol translation between the first computer action as a proxy transmitter and the second computer acting as a proxy receiver; and

to receive a replica of the data resource transmitted over the WAN by the proxy transmitter, wherein the replica was retrieved by the proxy transmitter from the file server over the first LAN in response to the message.

35. A product according to claim 34, wherein the instructions cause the computer to intercept the request for the data resource submitted in accordance with a native network file system protocol of the file server, and to send the message in accordance with a WAN transport protocol different from the native network file system protocol of the file server.