Managing resource allocations

• US 8,615,796 B2
• Filed: 07/30/2009
• Issued: 12/24/2013
• Est. Priority Date: 12/10/2003
• Status: Expired due to Fees

• Current Assignee: Aventail LLC
• Original Assignee: Aventail LLC
• Inventors: Hopen, Chris, Sauve, Bryan, Hoover, Paul, Perry, Bill
• Primary Examiner(s): Dada, Beemnet
• Assistant Examiner(s): BEHESHTI SHIRAZI, SAYED ARESH
• Application Number:
  US12/512,884
• Publication Number:
  US 20100024008A1
• Time in Patent Office: 1,608 Days
• Field of Search: 709/226, 709/219, 709/245, 709/225, 709/238, 726/3, 726/4, 726/13, 726/15, 726/16
• US Class Current: 726/13
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/14 Routing performance; Theoretical aspects
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Techniques for determining which resource access requests are handled locally at a remote computer, and which resource access requests are routed or “redirected” through a virtual private network. One or more routing or “redirection” rules are downloaded from a redirection rule server to a remote computer. When the node of the virtual private network running on the remote computer receives a resource access request, it compares the identified resource with the rules. Based upon how the identified resource matches one or more rules, the node will determine whether the resource access request is redirected through the virtual private network or handled locally (e.g., retrieved locally from another network). A single set of redirection rules can be distributed to and employed by a variety of different virtual private network communication techniques.

Claims

1. A method of routing resource access requests based upon a resource name, the method comprising:

receiving a resource access request over virtual private network, the resource access request identifying a requested resource by name;

receiving a name service reply for the resource;

wherein the name service reply is a WINS, Windows Internet Network Service, reply;

extracting a name for the resource from the name service reply;

determining that the resource name matches a redirection rule, the redirection rule used to determine whether the resource access request is redirected through the virtual private network or handled locally, and wherein the resource name identifies a service accessible through the virtual private network;

deriving routing information for the resource from the name service reply when the resource name matches a redirection rule; and

mapping the resource name against the derived routing information in a look aside table.

2. The method of claim 1, further comprising:

determining that the name of the requested resource is in the look aside table;

obtaining the routing information mapped to the name of the requested resource from the look aside table when the name of the requested resource is in the look aside table; and

routing the resource access request using the obtained routing information.

3. The method of claim 2, further comprising routing the resource access request using the obtained routing information by providing the obtained routing information to a system routing table.