Rule-based networking device

• US 8,271,636 B2
• Filed: 09/10/2009
• Issued: 09/18/2012
• Est. Priority Date: 11/23/2004
• Status: Expired due to Fees

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: L'Heureux, Israel, Malmskog, Steve
• Primary Examiner(s): Moise, Emmanuel L
• Assistant Examiner(s): KIM, EDWARD J
• Application Number:
  US12/557,240
• Publication Number:
  US 20090327827A1
• Time in Patent Office: 1,104 Days
• Field of Search: 709/217, 709/219, 709/223, 709/225, 709227-229, 709238-239
• US Class Current: 709/223
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

A networking system, device, and method are provided. The networking device typically includes a user-defined ruleset including HTTP request rules and HTTP response rules. The networking device may further include a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server. The networking device may further include a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response, and send the modified HTTP response to the client.

Claims

1. A networking device positioned intermediate to a client and server on a computer network, the networking device comprising:

a user-defined ruleset including HTTP request rules and HTTP response rules;

a configuration tool configured to enable a user to configure the HTTP request rules and HTTP response rules of the user-defined ruleset, wherein the configuration tool receives input from the user defining one or more of the HTTP request rules or the HTTP response rules of the user-defined ruleset using a syntax that allows the user to specify a test condition and an action statement for each of the rules;

a request processor configured to receive an incoming HTTP request from the client, apply at least one of the HTTP request rules to the incoming HTTP request to detect the test condition specified by the at least one of the HTTP request rules, to thereby produce a modified HTTP request in accordance with the action statement specified by the at least one of the HTTP request rules, and send the modified HTTP request to the server; and

a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply at least one of the HTTP response rules to the HTTP response to detect the test condition specified by the at least one of the HTTP response rules, to thereby produce a modified HTTP response in accordance with the action statement specified by the at least one of the HTTP response rules, and send the modified HTTP response to the client.

2. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request header.

3. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request URL.

4. The networking device of claim 1, wherein at least one of the HTTP request rules is configured to detect a test condition of a request query.

5. The networking device of claim 1, wherein at least one of the HTTP response rules is configured to detect a test condition of a response header.

6. The networking device of claim 1, wherein at least one of the HTTP response rules is configured to detect a test condition of response content contained in an entity-body of an HTTP response.

7. The networking device of claim 1, wherein the HTTP request rules include one or more request connection rules configured to instruct the networking device to detect a test condition of an HTTP request and if the test condition is met to take a predetermined action relating to the connection over which the HTTP request has been received.

8. The networking device of claim 7, wherein the HTTP request rules include one or more request parameter rules configured to instruct the networking device to detect a test condition of the HTTP request and if the test condition is met to take a predetermined action relating to a header of the HTTP request.

9. The networking device of claim 8, wherein the request processor is configured to apply the request connection rule prior to applying the request parameter rule.

10. The networking device of claim 1, wherein the HTTP response rules include one or more response header rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to a header of the HTTP response.

11. The networking device of claim 10, wherein the test condition includes detecting that the HTTP response indicates that the request has failed.

12. The networking device of claim 11, wherein the predetermined action is to retry the request to the same server.

13. The networking device of claim 11, wherein the predetermined action is to retry the request to a different server.

14. The networking device of claim 11, wherein the HTTP response rule predicates taking a selected predetermined action based on the existence of the parameter in the HTTP response.

15. The networking device of claim 10, wherein the HTTP response rules include one or more response content rules configured to instruct the networking device to detect a test condition of the HTTP response and if the test condition is met to take a predetermined action relating to content of the HTTP response.

16. The networking device of claim 15, wherein the response processor is configured to apply the response header rule prior to applying the response content rule.

17. The networking device of claim 1, wherein the HTTP request is an HTTPS request.

18. The networking device of claim 1, wherein the response processor is configured to add a compact policy code to the HTTP response.

19. A networking method for use with a networking device positioned intermediate a client and a server on a computer network, the method comprising:

presenting a configuration tool with the network device to receive input from a user defining one or more HTTP request rules using a syntax that allows the user to specify a test condition and an action statement for each of the one or more HTTP request rules;

providing a user-defined ruleset executable by the networking device, the ruleset including the at least one HTTP request rule;

receiving an incoming HTTP request from the client at the networking device;

applying the at least one HTTP request rule to the incoming HTTP request to detect the test condition of the one of the HTTP request rules;

upon detecting the test condition, producing a modified HTTP request in accordance with the action statement of the one of the HTTP request rules; and

sending the modified HTTP request to the server.

20. The networking method of claim 19,

wherein the HTTP request rules include one or more request connection rules configured to instruct the networking device to detect the test condition of an HTTP request and if the test condition is met to take a predetermined action specified by the action statement, and

wherein the predetermined action relates to the connection over which the HTTP request has been received.

21. The networking method of claim 20,

wherein the HTTP request rules include one or more request parameter rules configured to instruct the networking device to detect the test condition of the HTTP request and if the test condition is met to take a predetermined action specified by the action statement, and

wherein the predetermined action relates to a header of the HTTP request.

22. The networking method of claim 21, wherein in applying the HTTP request rules, request connection rules are applied prior to applying request parameter rules.

23. The networking method of claim 19,

wherein presenting the configuration tool further comprises presenting the configuration tool to receive input from a user defining one or more HTTP response rules using, for each of the HTTP request rules, a syntax that specifies a test condition and an action statement;

wherein the user-defined ruleset further includes the HTTP response rules, the method further comprising;

receiving an HTTP response to the modified HTTP request from the server;

applying the HTTP response rules to the HTTP response to detect the test condition;

upon detecting the test condition, producing a modified HTTP response in accordance with the action statement of the corresponding one of the HTTP response rules; and

sending the modified HTTP response to the client.

24. The networking method of claim 23,

wherein the HTTP response rules include one or more response header rules configured to instruct the networking device to detect the test condition of the HTTP response and if the test condition is met to take a predetermined action specified by the action statement of the corresponding header rules, and

wherein the predetermined action relates to a header of the HTTP response.

25. The networking method of claim 24,

wherein the HTTP response rules include one or more response content rules configured to instruct the networking device to detect the test condition of the HTTP response and if the test condition is met to take a predetermined action specified by the action statement of the corresponding header rules, and

wherein the predetermined action relates to content of the HTTP response.

26. The networking method of claim 25, wherein in applying the HTTP response rules, response header rules are applied prior to applying response content rules.

27. A networking device positioned intermediate a client and server on a computer network, the networking device comprising:

a user-defined ruleset including HTTP request rules and HTTP response rules;

a configuration tool configured to enable a user to configure the HTTP request rules and HTTP response rules of the user-defined ruleset, wherein the configuration tool receives input from the user defining one or more of the HTTP request rules or the HTTP response rules of the user-defined ruleset using a syntax that allows the user to specify a test condition and an action statement for each of the rules;

a request processor configured to receive an incoming HTTP request from the client, apply HTTP request rules to the incoming HTTP request, to thereby produce a modified HTTP request, and send the modified HTTP request to the server; and

a response processor configured to receive an HTTP response to the modified HTTP request from the server, apply the HTTP response rules to the HTTP response, to thereby produce a modified HTTP response, and send the modified HTTP response to the client;

wherein the HTTP request rules include (a) request connection rules configured to instruct the networking device to detect the test condition of an HTTP request and if the test condition is met to take a predetermined action specified by the corresponding action statement relating to the connection over which the HTTP request has been received, and (b) request parameter rules configured to instruct the networking device to detect the test condition of the HTTP request and if the test condition is met to take a predetermined action specified by the corresponding action statement relating to a header of the request, and wherein the HTTP response rules include (c) response header rules configured to instruct the networking device to detect the test condition and if the test condition is met take a predetermined action specified by the corresponding action statement relating to a header of the response, and (d) response content rules configured to instruct the networking device to detect the test condition and if the test condition is met take a predetermined action specified by the corresponding action statement relating to content of the request.