Client traffic redirection service

• US 9,032,092 B1
• Filed: 12/28/2011
• Issued: 05/12/2015
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Sinn, Frederick David, Pietsch, Justin
• Primary Examiner(s): Gilles, Jude Jean
• Assistant Examiner(s): Means, Jaren M
• Application Number:
  US13/338,452
• Time in Patent Office: 1,231 Days
• US Class Current: 709/238
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

Disclosed are various embodiments for performing network traffic redirection at the client side. Sending of data to a service at a network address is initiated. Whether the network address is in a predetermined network address range is determined. The network address is translated, when the network address is in the predetermined network address range, to one of multiple other network addresses based at least in part on an availability of the service at the other network address. The data is routed to the other network address.

Claims

1. A non-transitory computer-readable medium embodying at least one program executable in a computing device coupled to a network, the at least one program comprising:

code that initiates sending of data to a service at a first domain name, the first domain name being predetermined;

code that obtains a first network address by performing a domain name system (DNS) lookup on the first domain name;

code that determines whether the first network address is in a predetermined redirection network address range, the predetermined redirection network address range being unroutable by the network;

code that obtains a second domain name by performing a reverse DNS lookup on the first network address when the first network address is in the predetermined redirection network address range, the second domain name being returned based at least in part on an availability of the service through the second domain name;

code that obtains a second network address by performing a DNS lookup on the second domain name, the second network address being routable by the network;

code that configures a network address translation (NAT) filter of the computing device to establish a rule that routes between the first network address and the second network address; and

code that routes the data to the second network address.

2. The non-transitory computer-readable medium of claim 1, wherein the second network address corresponds to a load balancer for the service.

3. The non-transitory computer-readable medium of claim 1, wherein the at least one program further comprises:

code that obtains a third domain name by performing a reverse DNS lookup on the first network address when the network address is in the predetermined redirection network address range, the other domain name being returned based at least in part on an availability of the service through the third domain name and an unavailability of the service through the second domain name;

code that obtains a third network address by performing a DNS lookup on the third domain name, the third network address being routable by the network; and

code that configures the NAT filter of the computing device to establish a rule that routes between the first network address and the third network address.

4. A system, comprising:

a computing device; and

at least one application executable in the computing device, the at least one application being configured to;

initiate sending of data to a service at a network address;

determine whether the network address is in a predetermined network address range;

translate the network address, when the network address is in the predetermined network address range, to one of a plurality of other network addresses based at least in part on an availability of the service at the one of the other network addresses; and

route the data to the one of the other network addresses.

5. The system of claim 4, wherein initiating sending of data to a service at a network address further comprises obtaining the network address by performing a domain name system (DNS) query on a predetermined domain name.

6. The system of claim 4, wherein translating the network address further comprises:

performing a reverse domain name system (DNS) query on the network address to obtain one of a plurality of domain names, wherein the domain names correspond to the other network addresses;

performing a DNS query on the one of the domain names to obtain the one of the other network addresses; and

configuring a network address translation filter of the computing device to route data destined for the network address to the one of the other network addresses.

7. The system of claim 6, wherein the reverse DNS query and the DNS query are performed in user space of the computing device.

8. The system of claim 4, wherein translating the network address further comprises:

obtaining data that maps the network address to the one of the other network addresses from a redirection coordination server; and

configuring a network address translation (NAT) filter of the computing device to route data destined for the network address to the one of the other network addresses in response to obtaining the data that maps the network address to the one of the other network addresses.

9. The system of claim 8, wherein the data that maps the network address to the one of the other network addresses is pushed to the computing device by the redirection coordination server.

10. The system of claim 8, wherein the data that maps the network address to the one of the other network addresses is obtained in response to determining that a rule in the NAT filter does not exist for the network address.

11. The system of claim 4, wherein the at least one application includes a network address translation (NAT) filter executed in kernel space of the computing device, the NAT filter being configured to invoke an application executed in user space of the computing device in response to determining that the network address is in the predetermined network address range.

12. The system of claim 4, wherein at least some of the other network addresses each correspond to a respective load balancer for the service.

13. The system of claim 12, wherein each of the load balancers are configured to route the data among a respective plurality of service providers for the service.

14. The system of claim 4, wherein at least some of the other network addresses each correspond to a respective service provider for the service.

15. A method, comprising:

opening, by a service client in a computing device, a data connection to a service at a network address;

determining, in the computing device, whether the network address is in a predetermined network address range;

establishing, in the computing device, a network address translation between the network address and one of a plurality of other network addresses based at least in part on an availability of the service at the one of the other network addresses in response to determining that the network address is in the predetermined network address range;

routing, in the computing device, outbound data from the service client to the service through the data connection using the network address translation; and

routing, in the computing device, inbound data from the service to the service client through the data connection using the network address translation.

16. The method of claim 15, further comprising:

determining, in the computing device, that the service is unavailable at the one of the other network addresses; and

establishing, in the computing device, another network address translation between the network address and another one of the other network addresses to replace the network address translation in response to determining that the service is unavailable at the one of the other network addresses.

17. The method of claim 15, wherein the step of establishing the network address translation further comprises the steps of:

performing, in the computing device, a reverse domain name system (DNS) lookup on the network address to obtain a domain name; and

performing, in the computing device, a DNS lookup on the domain name to obtain the one of the network addresses.

18. The method of claim 15, wherein establishing the network address translation further comprises obtaining, in the computing device, data that maps the network address to the one of the other network addresses from a redirection coordination server.

19. The method of claim 15, further comprising of obtaining, by the service client in the computing device, the network address by performing a domain name system (DNS) lookup on a predetermined domain name associated with the service.

20. The method of claim 15, wherein the computing device is connected to a network, and the predetermined network address range is unroutable by the network.