Methods to manage services over a service gateway

• US 9,094,364 B2
• Filed: 12/23/2011
• Issued: 07/28/2015
• Est. Priority Date: 12/23/2011
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Xu, Feilong, Sampat, Rishi
• Primary Examiner(s): Moise, Emmanuel L
• Assistant Examiner(s): Shaw, Robert
• Application Number:
  US13/337,030
• Publication Number:
  US 20130166762A1
• Time in Patent Office: 1,313 Days
• Field of Search: 709/228
• US Class Current: 1/1
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/255 Maintenance or indexing of mapping tables
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

In activating a service, a service gateway retrieves a service table entry using a service or server address of the service entry, where the service table entry has an association with another service entry. An association to the service entry is added and a marker value is set to indicate associations with two service entries. After a time duration, the association with the other service entry is removed, and the marker value is changed accordingly. In deactivating a service entry, the service gateway calculates a hash value for the service or server address of the service entry. After matching the hash value to a hash value of another service entry, an association with the other service entry is added. A marker value is set to indicate associations with two service entries. After a time duration, the association with the service entry is removed, and the marker value is changed accordingly.

Claims

1. A method for managing services by a service gateway, comprising:

obtaining a first service entry and a second service entry by the service gateway, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtaining a service table entry of a service mapping table, the service table entry having an association with the second service entry;

adding to the service table entry an association to the first service entry;

storing a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

setting a timer associated with the service table entry to a predetermined duration;

in response to an expiration of the timer, removing the association with the second service entry from the service table entry;

prior to the removing of the association with the second service entry from the service table entry;

receiving a data packet by the service gateway from a host, the data packet comprising a third service address;

comparing the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determining the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, creating a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third service address and the first service address, modifying the data packet by replacing the third service address with the first server address;

in response to finding the match between the third service address and the second service address, modifying the data packet by replacing the third service address with the second server address; and

sending the modified data packet to the first server address or the second server address; and

in response to removing the association with the second service from the service table entry, changing the marker value to indicate that the service table entry is not associated with a plurality of service entries.

2. The method of claim 1, wherein the creating comprises:

in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the first server address of the first service entry and the third service address of the data packet in the session entry; and

in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the second server address of the second service entry and the third service address of the data packet in the session entry.

3. The method of claim 1, wherein the receiving a data packet by the service gateway from a host comprises:

receiving the data packet from the host;

comparing the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modifying the data packet by replacing the third service address with a given server address in the given session entry;

skipping the comparing the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determining, the creating, the modifying the data packet by replacing the third service address with the first server address, the modifying the data packet by replacing the third service address with the second server address, and the sending; and

sending the modified data packet to the given server address; and

in response to finding no matches between the data packet and the session entries, performing the comparing the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determining, the creating, the modifying the data packet by replacing the third service address with the first server address, the modifying the data packet by replacing the third service address with the second server address, and the sending the modified data packet to the first server address or the second server address.

7. The method of claim 1, wherein the obtaining comprises:

receiving the first service entry for a service to be activated by the service gateway; and

retrieving the service table entry of the service mapping table using the first service address or the first server address of the first service entry.

8. The method of claim 1, wherein the obtaining comprises:

receiving the second service entry for a service to be deactivated by the service gateway; and

retrieving the first service entry using the second service entry by the service gateway.

9. The method of claim 8, wherein the receiving the second service entry for the service to be deactivated by the service gateway, the retrieving, and the adding comprises:

receiving an indication to deactivate the second service entry by the service gateway;

calculating a first hash value for the second service address or the second server address of the second service entry;

determining whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

in response to determining that the second hash value matches the first hash value, adding an association with the first service entry to the service table entry.

4. A method for managing services by a service gateway, comprising:

obtaining a first service entry and a second service entry by the service gateway, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtaining a service table entry of a service mapping table, the service table entry having an association with the second service entry;

adding to the service table entry an association to the first service entry;

storing a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

setting a timer associated with the service table entry to a predetermined duration;

in response to an expiration of the timer, removing the association with the second service entry from the service table entry; and

prior to the removing of the association with the second service entry from the service table entry;

receiving a data packet by the service gateway from a server, the data packet comprising a third server address;

comparing the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determining the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, creating a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third server address and the first server address, modifying the data packet by replacing the third server address with the first service address;

in response to finding the match between the third server address and the second server address, modifying the data packet by replacing the third server address with the second service address;

and sending the modified data packet to a host address from the data packet.

5. The method of claim 4, wherein the creating comprises:

in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the first service address of the first service entry and the third server address of the data packet in the session entry; and

in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, storing the second service address of the second service entry and the third service address of the data packet in the session entry.

6. The method of claim 4, wherein the receiving a data packet by the service gateway from a server comprises:

receiving the data packet from the server;

comparing the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modifying the data packet by replacing the third server address with a given service address in the given session entry;

skipping the comparing the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry, the determining, the creating, the modifying the data packet by replacing the third server address with the first service address, the modifying the data packet by replacing the third server address with the second service address, and the sending; and

sending the modified data packet to the host address; and

in response to finding no matches between the data packet and the session entries, performing the comparing the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry, the determining, the creating, the modifying the data packet by replacing the third server address with the first service address, the modifying the data packet by replacing the third server address with the second service address, and the sending the modified data packet to a host address from the data packet.

10. A computer program product for managing services, the computer program product comprising:

a non-transitory computer readable medium having computer readable program code embodied therewith, the computer readable program code configured to;

obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

add to the service table entry an association to the first service entry;

store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

set a timer associated with the service table entry to a predetermined duration; and

in response to an expiration of the timer, remove the association with the second service entry from the service table entry;

prior to the removing of the association with the second service entry from the service table entry;

receive a data packet by the service gateway from a host, the data packet comprising a third service address;

compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determine the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third service address and the first service address, modify the data packet by replacing the third service address with the first server address;

in response to finding the match between the third service address and the second service address, modify the data packet by replacing the third service address with the second server address; and

send the modified data packet to the first server address or the second server address; and

in response to removing the association with the second service from the service table entry, change the marker value to indicate that the service table entry is not associated with a plurality of service entries.

11. The computer program product of claim 10, wherein the create comprises:

in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first server address of the first service entry and the third service address of the data packet in the session entry; and

in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second server address of the second service entry and the third service address of the data packet in the session entry.

12. The computer program product of claim 10, wherein the receive a data packet by the service gateway from a host comprises:

receive the data packet from the host;

compare the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modify the data packet by replacing the third service address with a given server address in the given session entry;

skip the compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determine, the create, the modify the data packet by replacing the third service address with the first server address, the modify the data packet by replacing the third service address with the second server address, and the send; and

send the modified data packet to the given server address; and

in response to finding no matches between the data packet and the session entries, perform the compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determine, the create, the modify the data packet by replacing the third service address with the first server address, the modify the data packet by replacing the third service address with the second server address, and the send the modified data packet to the first server address or the second server address.

16. The computer program product of claim 10, wherein the obtain comprises:

receive the first service entry for a service to be activated by the service gateway; and

retrieve the service table entry of the service mapping table using the first service address or the first server address of the first service entry.

17. The computer program product of claim 10, wherein the obtain comprises:

receive the second service entry for a service to be deactivated by the service gateway; and

retrieve the first service entry using the second service entry by the service gateway.

18. The computer program product of claim 17, wherein the receive the second service entry for the service to be deactivated by the service gateway, the retrieve, and the add comprises:

receive an indication to deactivate the second service entry by the service gateway;

calculate a first hash value for the second service address or the second server address of the second service entry;

determine whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

in response to determining that the second hash value matches the first hash value, add an association with the first service entry to the service table entry.

13. A computer program product for managing services, the computer program product comprising:

a computer readable medium having computer readable program code embodied therewith, the computer readable program code configured to;

obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

add to the service table entry an association to the first service entry;

store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

set a timer associated with the service table entry to a predetermined duration;

in response to an expiration of the timer, remove the association with the second service entry from the service table entry; and

prior to the removing of the association with the second service entry from the service table entry;

receive a data packet by the service gateway from a server, the data packet comprising a third server address;

compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determine the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third server address and the first server address, modify the data packet by replacing the third server address with the first service address;

in response to finding the match between the third server address and the second server address, modify the data packet by replacing the third server address with the second service address; and

send the modified data packet to a host address from the data packet.

14. The computer program product of claim 13, wherein the create comprises:

in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first service address of the first service entry and the third server address of the data packet in the session entry; and

in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second service address of the second service entry and the third service address of the data packet in the session entry.

15. The computer program product of claim 13, wherein the receive a data packet by the service gateway from a server comprises:

receive the data packet from the server;

compare the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modify the data packet by replacing the third server address with a given service address in the given session entry;

skip the compare the third server address of the data packet with the server address of the first service entry or with the second server address of the second service entry, the determine, the create, the modify the data packet by replacing the third server address with the first service address, the modify the data packet by replacing the third server address with the second service address, and the send; and

send the modified data packet to the host address; and

in response to finding no matches between the data packet and the session entries, perform the compare the third server address of the data packet with the server address of the first service entry or with the second server address of the second service entry, the determine, the create, the modify the data packet by replacing the third server address with the first service address, the modify the data packet by replacing the third server address with the second service address, and the send the modified data packet to a host address from the data packet.

19. A system, comprising:

a processor; and

a non-transitory computer readable medium having computer readable program code embodied therewith for execution by the processor, the computer readable program code configured to;

obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

add to the service table entry an association to the first service entry;

store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

set a timer associated with the service table entry to a predetermined duration;

in response to an expiration of the timer, remove the association with the second service entry from the service table entry;

prior to the removing of the association with the second service entry from the service table entry;

receive a data packet by the service gateway from a host, the data packet comprising a third service address;

compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry;

in response to finding a match between the third service address and the first service address, or between the third service address and the second service address, determine the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third service address and the first service address, modify the data packet by replacing the third service address with the first server address;

in response to finding the match between the third service address and the second service address, modify the data packet by replacing the third service address with the second server address; and

send the modified data packet to the first server address or the second server address; and

in response to removing the association with the second service from the service table entry, change the marker value to indicate that the service table entry is not associated with a plurality of service entries.

20. The system of claim 19, wherein the create comprises:

in response to finding the match between the third service address and the first service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first server address of the first service entry and the third service address of the data packet in the session entry; and

in response to finding the match between the third service address and the second service address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second server address of the second service entry and the third service address of the data packet in the session entry.

21. The system of claim 19, wherein the receive a data packet by the service gateway from a host comprises:

receive the data packet from the host;

compare the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modify the data packet by replacing the third service address with a given server address in the given session entry;

skip the compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determine, the create, the modify the data packet by replacing the third service address with the first server address, the modify the data packet by replacing the third service address with the second server address, and the send; and

send the modified data packet to the given server address; and

in response to finding no matches between the data packet and the session entries, perform the compare the third service address of the data packet with the first service address of the first service entry or with the second service address of the second service entry, the determine, the create, the modify the data packet by replacing the third service address with the first server address, the modify the data packet by replacing the third service address with the second server address, and the send the modified data packet to the first server address or the second server address.

25. The system of claim 19, wherein the obtain comprises:

receive the first service entry for a service to be activated by the service gateway; and

retrieve the service table entry of the service mapping table using the first service address or the first server address of the first service entry.

26. The system of claim 19, wherein the obtain comprises:

receive the second service entry for a service to be deactivated by the service gateway; and

retrieve the first service entry using the second service entry by the service gateway.

27. The system of claim 26, wherein the receive the second service entry for a service to be deactivated by the service gateway, the retrieve, and the add comprises:

receive an indication to deactivate the second service entry by the service gateway;

calculate a first hash value for the second service address or the second server address of the second service entry;

determine whether a second hash value of the first service entry in the service mapping table matches the first hash value; and

in response to determining that the second hash value matches the first hash value, add an association with the first service entry to the service table entry.

22. A system, comprising:

a processor; and

a non-transitory computer readable medium having computer readable program code embodied therewith for execution by the processor, the computer readable program code configured to;

obtain a first service entry and a second service entry, the first service entry comprising a first service address and a first server address, the second service entry comprising a second service address and a second server address;

obtain a service table entry of a service mapping table, the service table entry having an association with the second service entry;

add to the service table entry an association to the first service entry;

store a marker value associated with the service table entry to indicate that the service table entry is associated with a plurality of service entries;

set a timer associated with the service table entry to a predetermined duration;

in response to an expiration of the timer, remove the association with the second service entry from the service table entry;

prior to the removing of the association with the second service entry from the service table entry;

receive a data packet by the service gateway from a server, the data packet comprising a third server address;

compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry;

in response to finding a match between the third server address and the first server address, or between the third server address and the second server address, determine the marker value associated with the service table entry;

in response to determining that the marker value indicates that the service table entry is associated with a plurality of service entries, create a session entry based on the service table entry and storing the session entry in a session table;

in response to finding the match between the third server address and the first server address, modify the data packet by replacing the third server address with the first service address;

in response to finding the match between the third server address and the second server address, modify the data packet by replacing the third server address with the second service address; and

send the modified data packet to a host address from the data packet; and

in response to removing the association with the second service from the service table entry, change the marker value to indicate that the service table entry is not associated with a plurality of service entries.

23. The system of claim 22, wherein the create comprises:

in response to finding the match between the third server address and the first server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the first service address of the first service entry and the third server address of the data packet in the session entry; and

in response to finding the match between the third server address and the second server address, and in response to determining that the marker value indicates that the service table entry is associated with the plurality of service entries, store the second service address of the second service entry and the third service address of the data packet in the session entry.

24. The system of claim 22, wherein the receive a data packet by the service gateway from a server comprises:

receive the data packet from the server;

compare the data packet against session entries in the session table;

in response to finding a match between the data packet and a given session entry in the session table;

modify the data packet by replacing the third server address with a given service address in the given session entry;

skip the compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry, the determine, the create, the modify the data packet by replacing the third server address with the first service address, the modify the data packet by replacing the third server address with the second service address, and the send; and

send the modified data packet to the host address; and

in response to finding no matches between the data packet and the session entries, perform the compare the third server address of the data packet with the first server address of the first service entry or with the second server address of the second service entry, the determine, the create, the modify the data packet by replacing the third server address with the first service address, the modify the data packet by replacing the third server address with the second service address, and the send the modified data packet to a host address from the data packet.