In-line network device for storing application-layer data, processing instructions, and/or rule sets

• US 8,612,585 B2
• Filed: 09/06/2011
• Issued: 12/17/2013
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Radware Limited
• Original Assignee: Radware Limited
• Inventors: Alstad, Kent
• Primary Examiner(s): BURGESS, BARBARA N
• Application Number:
  US13/226,394
• Publication Number:
  US 20120233318A1
• Time in Patent Office: 833 Days
• Field of Search: 709/203, 709/206, 709/207, 709/224, 709/238, 709/246
• US Class Current: 709/224
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/2871 Implementation details of single intermediate entities
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/5651 Reducing the amount or size of exchanged application data

Abstract

A network device located in the data path between a user computer and a server stores application data, processing instructions, and/or rule sets. By storing user computer-specific application data, processing instructions, and/or rule sets in the data path between the user computer and the server, the invention reduces the complexity of the web server, improves the handling of server failure, and increases the overall scalability and performance of the system.

Claims

1. In a network device situated in a communication path between a first network node and a second network node, the first network node comprising a server belonging to a first group of servers, a method for maintaining at least one selected from the group consisting of application data, instructions, and rule sets, comprising:

at the network device, performing the steps of;

intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

storing a portion of the first network message at a storage device associated with the network device, the stored portion comprising at least one of application data, instructions, and rule sets;

removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

transmitting the groomed network message from the network device to the second network node;

intercepting a second network message from the second network node and intended for a server belonging to the first group of servers, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, retrieving, from the storage device associated with the network device, the portion identified by the index data; and

transmitting the second network message and the retrieved portion to a selected server belonging to the first group of servers.

2. The method of claim 1, wherein the stored portion of the first network message comprises at least one instruction to be performed by the network device.

3. The method of claim 1, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

4. The method of claim 1, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.

5. In a network device situated in a communication path between a first network node and a second network node, a method for maintaining at least one selected from the group consisting of application data, instructions, and rule sets, comprising:

at the network device, performing the steps of;

intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

storing a portion of the first network message at a storage device associated with the network device, the stored portion comprising at least one of application data, instructions, and rule sets;

removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

transmitting the groomed network message from the network device to the second network node;

intercepting a second network message from the second network node and intended for the first network node, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, retrieving, from the storage device associated with the network device, the portion identified by the index data; and

transmitting the second network message and the retrieved portion to the first network node.

6. The method of claim 5, wherein:

the stored portion of the first network message comprises at least one instruction to be performed by the network device;

and wherein the method further comprises;

performing the at least one instruction at the network device.

7. The method of claim 5, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

8. The method of claim 5, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.

9. A computer program product for maintaining at least one selected from the group consisting of application data, instructions, and rule sets in a network device situated in a communication path between a first network node and a second network node, the first network node comprising a server belonging to a first group of servers, comprising:

a non-transitory computer-readable storage medium; and

computer program code, encoded on the medium, for causing a network device to perform the steps of;

intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

storing a portion of the first network message at a storage device associated with the network device, the stored portion comprising at least one of application data, instructions, and rule sets;

removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

transmitting the groomed network message from the network device to the second network node;

intercepting a second network message from the second network node and intended for a server belonging to the first group of servers, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, retrieving, from the storage device associated with the network device, the portion identified by the index data; and

transmitting the second network message and the retrieved portion to a selected server belonging to the first group of servers.

10. The computer program product of claim 9, wherein the stored portion of the first network message comprises at least one instruction to be performed by the network device.

11. The computer program product of claim 9, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

12. The computer program product of claim 9, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.

13. A computer program product for maintaining at least one selected from the group consisting of application data, instructions, and rule sets in a network device situated in a communication path between a first network node and a second network node, comprising:

a non-transitory computer-readable storage medium; and

computer program code, encoded on the medium, for causing a network device to perform the steps of;

intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

storing a portion of the first network message at a storage device associated with the network device, the stored portion comprising at least one of application data, instructions, and rule sets;

removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

transmitting the groomed network message from the network device to the second network node;

intercepting a second network message from the second network node and intended for the first network node, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, retrieving, from the storage device associated with the network device, the portion identified by the index data; and

transmitting the second network message and the retrieved portion to the first network node.

14. The computer program product of claim 13, wherein the stored portion of the first network message comprises at least one instruction to be performed by the network device.

15. The computer program product of claim 13, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

16. The computer program product of claim 13, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.

17. A network device situated in a communication path between a first network node and a second network node, the first network node comprising a server belonging to a first group of servers, for maintaining at least one selected from the group consisting of application data, instructions, and rule sets, comprising:

a communication module, for intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

a storage device, for storing a portion of the first network message, the stored portion comprising at least one of application data, instructions, and rule sets; and

a processor, for removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

wherein;

the communication module transmits the groomed network message from the network device to the second network node;

the communication module intercepts a second network message from the second network node and intended for a server belonging to the first group of servers, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, the processor retrieves, from the storage device associated with the network device, the portion identified by the index data; and

the communication module transmits the second network message and the retrieved portion to a selected server belonging to the first group of servers.

18. The device of claim 17, wherein the stored portion of the first network message comprises at least one instruction to be performed by the network device, and wherein the processor performs the at least one instruction.

19. The device of claim 17, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

20. The device of claim 17, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.

21. A network device situated in a communication path between a first network node and a second network node, for maintaining at least one selected from the group consisting of application data, instructions, and rule sets, comprising:

a communication module, for intercepting a first network message from the first network node and intended for the second network node, the first network message comprising at least one selected from the group consisting of application data, instructions, and rule sets;

a storage device, for storing a portion of the first network message, the stored portion comprising at least one of application data, instructions, and rule sets; and

a processor, for removing the stored portion from the first network message to generate a groomed network message, the groomed network message comprising an index identifying the stored portion;

wherein;

the communication module transmits the groomed network message from the network device to the second network node;

the communication module intercepts a second network message from the second network node and intended for the first network node, the second network message comprising index data identifying the stored portion;

responsive to intercepting the second network message, the processor retrieves, from the storage device associated with the network device, the portion identified by the index data; and

the communication module transmits the second network message and the retrieved portion to the first network node.

22. The device of claim 21, wherein the stored portion of the first network message comprises at least one instruction to be performed by the network device, and wherein the processor performs the at least one instruction.

23. The device of claim 21, wherein the first network message comprises at least one selected from the group consisting of:

a page request; and

a response to a page request.

24. The device of claim 21, wherein each network node comprises at least one selected from the group consisting of:

a client; and

a server.