Method and system for managing network traffic

• US 8,676,955 B1
• Filed: 09/06/2012
• Issued: 03/18/2014
• Est. Priority Date: 12/19/2002
• Status: Expired due to Term

• Current Assignee: F5 Networks, Inc. (F5 Incorporated)
• Original Assignee: F5 Networks, Inc. (F5 Incorporated)
• Inventors: Masters, Richard Roderick, Hansen, David A.
• Primary Examiner(s): JACOBS, LASHONDA T
• Application Number:
  US13/605,850
• Time in Patent Office: 558 Days
• Field of Search: 709/223, 709/224, 709/203, 709/217, 709/219, 709/225, 709/229
• US Class Current: 709/223
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

A system and method for directing network connections. The invention enables a network device to direct subsequent connections from a client to a server for accessing resources. A process extracts a persistence key from a received message, and employs the persistence key to identify the appropriate server. An interface is provided, enabling a user program to direct the process of extracting the persistence key. The invention also provides a way for multiple clients to persist to a common server.

Claims

1. A network device, comprising:

a memory device storing executable instructions; and

one or more processors that execute the instructions to perform actions, including;

receiving one or more packets from a client device;

extracting data items from the one or more packets, wherein at least some of the extracted data items are extracted from packets received within a secure communications protocol;

combining the extracted data items to create a persistence key;

searching for a valid mapping between the persistence key and a target device;

when a valid mapping is not found or otherwise determined to be invalid;

selecting a target device from a plurality of target devices,

creating a mapping of an other persistence key to the selected target device that is then stored into a persistence table, and

forwarding at least some of the one or more packets to the selected target device.

2. The network device of claim 1, wherein searching for a valid mapping further comprises:

detecting a timestamp associated with the persistence key; and

when the timestamp is determined to have timed out, then indicating that the mapping is invalid.

3. The network device of claim 1, wherein the one or more processors perform actions, further including:

determining that a mapping of the persistence key to a target device has timed out, and

in response to the timed out mapping, removing the mapping from the persistence table.

4. The network device of claim 1, wherein creating the mapping of the persistence key further comprises the selected target device generating the other persistence key, and transmitting the other persistence key to the network device.

5. The network device of claim 1, wherein selecting a target device from a plurality of target devices comprises employing a load balancing algorithm to select the target device.

6. The network device of claim 1, wherein combining the extracted data items further comprises:

receiving an instruction indicating a designated string to be extracted from the received packets; and

requesting to accumulate additional packets received from the client device until the designated string is detected in the extracted data items.

7. The network device of claim 1, wherein at least one of the one or more packets from the client device are used for creating the persistence key and are further not forwarded to the selected target device.

8. An apparatus comprising a non-transitory computer readable medium, having computer-executable instructions stored thereon, that in response to execution by a computing device, cause the computing device to perform operations, comprising:

receiving one or more packets from a client device;

extracting data items from the one or more packets, wherein at least some of the extracted data items are extracted from packets received within a secure communications protocol;

combining the extracted data items to create a persistence key;

searching for a valid mapping between the persistence key and a target device;

when a valid mapping is not found or is otherwise determined to be invalid;

selecting a target device from a plurality of target devices,

creating a mapping of an other persistence key to the selected target device that is then stored into a persistence table, and

forwarding at least some of the one or more packets to the selected target device.

9. The apparatus of claim 8, wherein extracting data items further comprises searching within the received packets for a specific data item or searching a defined number of bytes of data with the received packets.

10. The apparatus of claim 8, wherein searching for a valid mapping further comprises:

detecting a timestamp associated with the persistence key; and

when the timestamp is determined to have timed out, then indicating that the mapping is invalid.

11. The apparatus of claim 8, wherein the operations further comprise:

determining that a mapping of the persistence key to a target device has timed out, and

in response to the timed out mapping, removing the mapping from the persistence table.

12. The apparatus of claim 8, wherein creating the mapping of the persistence key further comprises the selected target device generating the other persistence key, and transmitting the other persistence key to the network device.

13. The apparatus of claim 8, wherein extracting data items further comprises performing one of a decryption or decompression action on at least some of the extracted data items.

14. The apparatus of claim 8, wherein searching for a valid mapping comprises searching within the persistence table for the mapping.

15. A computer-based method operating on a computer device, comprising:

receiving one or more packets from a client device;

extracting data items from the one or more packets, wherein at least some of the extracted data items are extracted from packets received within a secure communications protocol;

combining the extracted data items to create a persistence key;

searching for a valid mapping between the persistence key and a target device;

when a valid mapping is not found or is otherwise determined to be invalid;

selecting a target device from a plurality of target devices,

creating a mapping of an other persistence key to the selected target device that is then stored into a persistence table, and

forwarding at least some of the one or more packets to the selected target device; and

when the valid mapping is found, forwarding at least some of the one or more packets to the mapped target device.

16. The computer-based method of claim 15, wherein at least one of the one or more packets from the client device are used for creating the persistence key and are further not forwarded to the selected target device.

17. The computer-based method of claim 15, wherein combining the extracted data items further comprises:

receiving an instruction indicating a designated string to be extracted from the received packets; and

requesting to accumulate additional packets received from the client device until the designated string is detected in the extracted data items.

18. The computer-based method of claim 15, wherein extracting data items further comprises searching within the received packets for a specific data item or searching a defined number of bytes of data with the received packets.

19. The computer-based method of claim 15, wherein creating the mapping of the persistence key further comprises the selected target device generating the other persistence key, and transmitting the other persistence key to the network device.

20. The computer-based method of claim 15, wherein the selected target device further provides to the client device the other persistence key, such that the client device provides the other persistence key in a subsequent one or more received packets from the client device.