Providing distributed cache services

• US 8,438,254 B2
• Filed: 10/29/2007
• Issued: 05/07/2013
• Est. Priority Date: 12/10/2003
• Status: Active Grant

• Current Assignee: Aventail LLC
• Original Assignee: Aventail LLC
• Inventors: Hopen, Chris A., Tomlinson, Gary B., Brooke, John, Brown, Derek W., Burdge, Jonathan, Erickson, Rodger D.
• Primary Examiner(s): Joo, Joshua
• Application Number:
  US11/927,321
• Publication Number:
  US 20080183854A1
• Time in Patent Office: 2,017 Days
• Field of Search: 709223-226, 709201-203, 714 1- 4
• US Class Current: 709/223
• CPC Class Codes: G06F 11/2007 using redundant communication media
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 45/121 by minimising delays
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/101 based on network conditions
• CPC Class Codes: H04L 67/1017 based on a round robin mechanism
• CPC Class Codes: H04L 67/1029 using data related to the state of servers by a load balancer
• CPC Class Codes: H04L 67/1034 Reaction to server failures by a load balancer
• CPC Class Codes: H04L 67/1038 Load balancing arrangements to avoid a single path through a load balancer

Abstract

A network appliance is described that can provide a variety of software services, including both platform services, such as access method services, and a load balancing service. A network may include a network appliance that both provides one or more platform services and acts as a load balancer. When two or more such appliances are used together, they can replace a substantial portion of a conventional network. For example, when a network appliance receives a client communication, its load balancer service can determine whether one of its own platform services will process the communication or forward the communication to another network appliance for processing. Moreover, if the load balancing service of a network appliance fails, another network appliance can provide load balancing. Similarly, if another service of a network appliance fails, then the network appliance may continue to provide load balancing but forward communications requiring the failed service to another network appliance for processing.

Claims

1. A network appliance for providing distributed cache services, the network appliance comprising:

at least one platform service stored in memory and executable by a processor to provide one or more services to a client computer;

a service monitoring process stored in memory and executable to monitor a status of the at least one platform service using interprocess communications; and

a distributed cache service executable to;

record information specific to an individual user employing the at least one platform service, the recorded information including authentication information specific to the user,

determine an amount and type of the recorded authentication information to forward to another executable platform service on another network appliance when the at least one platform service fails, as detected by execution of the service monitoring process, the another executable platform service corresponding to the at least one platform service, the determination based on the individual user, and

forward the determined amount and type of recorded authentication information to the another executable platform service, wherein the recorded authentication information is employed to provide the one or more services to the user without interruption.

2. The network appliance of claim 1, wherein the at least one platform service is a virtual private network service, and wherein the recorded authentication information includes client authentication information for a session provided by the virtual private network service.

3. The network appliance of claim 2, wherein the client authentication information further includes encryption information, and wherein the session provided by the virtual private network service is encrypted based on the encryption information.

4. The network appliance of claim 3, wherein the forwarded information allows the another executable platform service to provide a virtual private network service and continue the encrypted session.

5. The network appliance of claim 3, wherein the forwarded information allows the another executable platform service to provide a virtual private network service and begin a new encrypted session.

6. The network appliance of claim 1, wherein the another executable platform service is on another network appliance.

7. The network appliance of claim 1, wherein the recorded information further includes state information concerning a user of a client computer.

8. A method for providing distributed cache services, the method comprising:

monitoring a status of at least one platform service using interprocess communications, the at least one platform service stored in a memory of a network appliance and executable by a processor of the network appliance to provide one or more services to a client computer;

recording information specific to an individual user employing the at least one platform service, the recorded information including authentication information specific to the user and stored in the memory;

determining an amount and type of the recorded authentication information to forward over a communication network to another platform service on another network appliance when the monitored status of the at least one platform service indicates failure, the another platform service corresponding to the at least one platform service, the determination based on the individual user; and

forwarding the determined amount and type of recorded authentication information to the another executable platform service, wherein the recorded authentication information is employed to provide the one or more services to the user without interruption.

9. The method of claim 8, wherein the at least one platform service is a virtual private network service.

10. The method of claim 9, wherein the recorded authentication information includes client authentication information for a session provided by the virtual private network service.

11. The method of claim 10, wherein the client authentication information includes encryption information, and wherein the session provided by the virtual private network service is encrypted based on the encryption information.

12. The method of claim 11, wherein forwarding the recorded information allows the another platform service to provide a virtual private network service and continue the encrypted session.

13. The method of claim 10, wherein forwarding the recorded information allows the another platform service to provide a virtual private network service and begin a new encrypted session.

14. The method of claim 8, wherein the recorded information further includes state information concerning a user of a client computer.

15. A non-transitory computer-readable storage medium having embodied thereon a program, the program being executable by a processor to perform a method for providing distributed cache services, the method comprising:

monitoring a status of at least one platform service using interprocess communications, the at least one platform service stored on a network appliance and executable to provide one or more services to a client computer;

recording information used by specific to an individual user employing the at least one platform service, the recorded information including authentication information specific to the user;

determining an amount and type of the recorded authentication information to forward to another platform service on another network appliance when the monitored status of the at least one platform service indicates failure, the another platform service corresponding to the at least one platform service, the determination based on the individual user; and

forwarding the determined amount and type of the recorded authentication information to the another executable platform service, wherein the recorded authentication information is employed to provide the one or more services to the user without interruption.

16. The non-transitory computer-readable storage medium of claim 15, wherein the at least one platform service is a virtual private network service.

17. The non-transitory computer-readable storage medium of claim 16, wherein the recorded authentication information includes client authentication information for a session provided by the virtual private network service.

18. The non-transitory computer-readable storage medium of claim 17, wherein the client authentication information includes encryption information, and wherein the session provided by the virtual private network service is encrypted based on the encryption information.

19. The non-transitory computer-readable storage medium of claim 17, wherein the program is further executable to receive a request for the recorded information from another platform service and to forward the requested information to the another platform service.