Performing message payload processing functions in a network element on behalf of an application

• US 8,312,148 B2
• Filed: 05/03/2011
• Issued: 11/13/2012
• Est. Priority Date: 12/06/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Anthias, Tefcros, Kumar, Sandeep, Ho, Ricky, Rajendran, Saravanakumar
• Primary Examiner(s): Elchanti, Hussein
• Assistant Examiner(s): Anwari, Maceeh
• Application Number:
  US13/100,144
• Publication Number:
  US 20110208867A1
• Time in Patent Office: 560 Days
• Field of Search: 709/227, 709/249
• US Class Current: 709/227
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element intercepts data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element. The network element determines whether information contained in layer 2-4 headers of the data packet satisfies specified criteria. If the information satisfies the specified criteria, the network element directs the data packets to a blade of the network element that performs processing based on an application layer message at least partially contained in the data packets. If the information does not satisfy the specified criteria, the network element forwards the data packets towards the destination without sending them to the blade.

Claims

1. A method, comprising the computer-implemented steps of:

intercepting, at a network element, one or more data packets comprising network layer or transport layer headers having an address of a destination that differs from the network element;

determining whether information contained in one or more layer 2-4 headers of the one or more data packet satisfies specified criteria;

in response to determining that the information satisfies the specified criteria, directing the one or more data packets to a blade of the network element that performs processing based on at least a portion of an application layer message that is at least partially contained in the one or more data packets;

wherein the application layer message comprises a multi-part MIME message, and wherein processing at least a portion of the application layer message includes handling each part of the multi-part MIME message separately from each other part;

in response to determining that the information does not satisfy the specified criteria, forwarding the one or more data packets towards the destination without sending the one or more data packets to the blade.

2. A method as recited in claim 1, wherein the information comprises one or more of a source IP address and a destination IP address.

3. A method as recited in claim 1, wherein the information comprises one or more of a source TCP port and a destination TCP port.

4. A method as recited in claim 1, further comprising:

determining, based on the portion of the application layer message, a particular message classification;

determining one or more actions with which the particular message classification is associated in response to a determination that the particular message classification is associated with the one or more actions.

5. A method as recited in claim 1, further comprising, based on the portion of the application layer message, performing one or more actions on behalf of the application.

6. A method as recited in claim 5, further comprising sending, from the network element, one or more second data packets that contain a modified application layer message;

wherein at least one of the one or more actions comprises modifying the portion of the application layer message to produce the modified application layer message.

7. A method as recited in claim 5, further comprising receiving user-specified input at the network element, wherein the user-specified input indicates an order in which the one or more actions are to be performed;

wherein performing the one or more actions comprises performing the one or more actions in the order.

8. A method as recited in claim 5, further comprising:

receiving user-specified input at the network element, wherein the user-specified input indicates one or more criteria;

determining whether the portion of the application layer message satisfies the one or more criteria;

wherein performing the one or more actions comprises performing the one or more actions that are associated with the one or more criteria.

9. A method as recited in claim 5, wherein determining whether the portion of the application layer message satisfies the one or more criteria comprises determining whether a specified string of text occurs within the portion of the application layer message.

10. A method as recited in claim 5, wherein the portion of the application layer message is formatted in Extensible Markup Language (XML), and wherein determining whether the portion of the application layer message satisfies the one or more criteria comprises determining whether a specified path occurs within the portion of the application layer message.

11. A method as recited in claim 5, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to the destination.

12. A method as recited in claim 1, further comprising sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

13. A method as recited in claim 1, wherein the network element is a network switch or router.

14. A method as recited in claim 1, wherein the network element is a proxy device.

15. A method as recited in claim 1, further comprising modifying the portion of the application layer message so that the portion of the application layer message is formatted in an application layer message format that differs from an application layer message format in which the portion of the application layer message was formatted when the one or more data packets were received at the network element.

16. A method as recited in claim 1, further comprising processing, at the network element, a message that is not destined for the device that hosts the application.

17. A method as recited in claim 1, further comprising:

determining whether the portion of the message will cause an entity to fail if the entity receives the message;

in response to a determination that the portion of the message will cause the entity to fail if the entity receives the message, performing one or more specified actions.

18. A method as recited in claim 1, further comprising performing, at the network element, an operation on a message that is a request message, a response message, an exception processing message, or a message that was not sent between a client application and a server application.

19. A method as recited in claim 1, further comprising modifying one or more headers associated with the one or more data packets so that the one or more data packets are destined for one or more destinations that include a second destination that differs from the first destination.

20. A non-transitory computer-readable storage medium storing one or more sequences of instructions, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

intercepting, at a network element, one or more data packets comprising network layer or transport layer headers having an address of a destination that differs from the network element;

determining whether information contained in one or more layer 2-4 headers of the one or more data packet satisfies specified criteria;

in response to determining that the information satisfies the specified criteria, directing the one or more data packets to a blade of the network element that performs processing based on at least a portion of an application layer message that is at least partially contained in the one or more data packets;

wherein the application layer message comprises a multi-part MIME message, and wherein processing at least a portion of the application layer message includes handling each part of the multi-part MIME message separately from each other part;

in response to determining that the information does not satisfy the specified criteria, forwarding the one or more data packets towards the destination without sending the one or more data packets to the blade.

21. A non-transitory computer-readable storage medium as recited in claim 20, wherein the one or more sequences of instructions further comprise instructions, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

determining, based on the portion of the application layer message, a particular message classification;

determining one or more actions with which the particular message classification is associated in response to a determination that the particular message classification is associated with the one or more actions.

22. A non-transitory computer-readable storage medium as recited in claim 20, wherein the one or more sequences of instructions further comprise instructions, which instructions, when executed by one or more processors, cause the one or more processors to carry out the step of, based on the portion of the application layer message, performing one or more actions on behalf of the application.

23. A non-transitory computer-readable storage medium as recited in claim 20, wherein the one or more sequences of instructions further comprise instructions, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

modifying the portion of the application layer message to produce the modified application layer message;

sending, from the network element, one or more second data packets that contain a modified application layer message;

wherein at least one of the one or more actions comprises.