Method and apparatus for managing a proxy autoconfiguration in SSL VPN

• US 9,207,953 B1
• Filed: 04/28/2004
• Issued: 12/08/2015
• Est. Priority Date: 04/28/2004
• Status: Active Grant

• Current Assignee: F5 Networks, Inc. (F5 Incorporated)
• Original Assignee: F5 Networks, Inc. (F5 Incorporated)
• Inventors: Shokhor, Sergey
• Primary Examiner(s): Survillo, Oleg
• Application Number:
  US10/833,677
• Time in Patent Office: 4,241 Days
• Field of Search: 709/249, 709/220
• US Class Current: 1/1
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 67/288 Distributed intermediate devices, i.e. intermediate devices for interaction with other intermediate devices on the same level
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols

Abstract

A method and apparatus for managing proxy autoconfiguration for a multihomed client. A client browser may employ a combined autoconfiguration module to split traffic based on a destination address of the traffic. The traffic may be split among at least two proxy servers. A proxy configuration manager may be employed to receive configuration information associated with each of the proxy servers. The proxy configuration manager enables the combined autoconfiguration module to be created based, in part, on the received configuration information. The proxy configuration manager further enables the client browser to split the traffic, based at least in part on the destination address.

Claims

1. A method for managing proxy configurations, comprising:

requesting information that is associated with a first proxy server, wherein the first proxy server is associated with a virtual private network (VPN), a first internet service provider (ISP), and a first Domain Name System (DNS) address space, wherein the VPN is associated with a VPN manager;

receiving the information;

requesting additional information that is associated with a second proxy server that is associated with a second ISP and a second DNS address space, wherein the first and the second ISPs are administratively distinct;

receiving the additional information;

independently creating, by a client device, a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

receiving at least one network request that is associated with a network address;

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the at least one network request to, based in part on the network address and one or more of the first ISP, the first DNS address space, the second ISP, or the second DNS address space; and

forwarding the at least one network request to the determined proxy server, wherein the combined autoconfiguration script is configured to split traffic between at least the first and the second proxy servers based on traffic destination by performing the determining step for each of the at least one network request.

2. The method of claim 1, wherein the information includes a URL of the first internet service provider, and wherein the additional information includes a URL of the second proxy server.

3. The method of claim 1, wherein the information includes a list of addresses that are associated with the first internet service provider, and wherein the additional information includes another list of addresses that are associated with the second ISP.

4. A method for managing proxy configurations, comprising:

receiving information that is associated with a first proxy server, wherein the first proxy server is associated with a virtual private network (VPN), a first Internet Service Provider (ISP), and a first Domain Name System (DNS) address space, wherein the VPN is associated with a VPN manager;

receiving additional information that is associated with a second proxy server, wherein the second proxy server is associated with a second ISP and a second DNS address space, wherein the first and the second ISPs are administratively distinct;

independently creating, by a client device, a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

configuring a client browser of the client device to employ the combined autoconfiguration script in managing the proxy configurations;

receiving a request that is associated with a network address;

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the request to based on one or more of the first ISP, the first DNS address space, the second ISP, or the second DNS address space; and

forwarding the request to the determined proxy server, wherein determining which proxy server to send the request comprises;

determining whether the requested network address is included in a list of hostnames included in the first DNS address space;

when the network address is included in the list, selecting the first proxy server to manage the requested network address; and

when the network address is not included in the list, selecting the second proxy server to manage the requested network address.

5. The method of claim 4, further comprising:

receiving yet additional information that is associated with a third proxy server,

wherein the combined autoconfiguration script further comprises at least part of the yet additional information.

6. The method of claim 4, wherein the second proxy server comprises a local proxy server configured for accessing the Internet.

7. The method of claim 4, wherein the list of hostnames is a list of hostnames included in the virtual private network.

8. The method of claim 4, further comprising:

configuring the client browser for a default proxy configuration; and

accessing the virtual private network manager to initiate a virtual private network connection.

9. The method of claim 8, further comprising:

when the virtual private network connection is terminated, resuming the default proxy configuration for the client browser.

10. An article of manufacture including a non-transitory processor-readable storage medium having processor-executable code encoded therein, which when executed by one or more processors, performs actions, the actions comprising:

receiving information that is associated with a first proxy server, wherein the first proxy server is associated with a virtual private network (VPN), associated with a first Internet Service Provider (ISP), and associated with a first Domain Name System (DNS) address space, wherein the VPN is associated with a VPN manager;

receiving additional information that is associated with a second proxy server that is associated with a second ISP and associated with a second DNS address space, wherein the first and the second ISPs are administratively distinct;

independently creating at a client device a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

configuring a client browser of the client device to employ the combined autoconfiguration script in managing the proxy configurations;

receiving a request that is associated with a network address;

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the request to based on one or more of the first ISP, the first DNS address space, the second ISP, or the second DNS address space; and

forwarding the request to the determined proxy server, wherein determining which proxy server to send the request comprises;

determining whether the requested network address is included in a list of hostnames included in the first DNS address space;

when the network address is included in the list, selecting the first proxy server to manage the requested network address; and

when the network address is not included in the list, selecting the second proxy server to manage the requested network address.

11. The article of manufacture of claim 10, the actions further comprising:

configuring the client browser for a default proxy configuration, wherein the default proxy configuration is associated with the second proxy server; and

accessing the virtual private network manager to initiate a virtual private network connection for the client device.

12. The article of manufacture of claim 11, the actions further comprising:

when the virtual private network connection is terminated, resuming the default proxy configuration for the client browser.

13. An article of manufacture including a non-transitory processor-readable storage medium having processor-executable code encoded therein, which when executed by one or more processors, performs actions for managing proxy configurations, comprising:

receiving information that is associated with a first proxy server, wherein the first proxy server is associated with a virtual private network (VPN), associated with a first Internet Service Provider (ISP), and associated with a first Domain Name System (DNS) address space, wherein the VPN is associated with a VPN manager;

receiving additional information that is associated with a second proxy server, wherein the second proxy server is associated with a second ISP and associated with a second DNS address space, wherein the first and the second ISPs are administratively distinct;

independently creating a combined autoconfiguration script at a client device based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

receiving at least one network request that is associated with a network address;

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the at least one network request to, based in part on the network address and one or more of the first ISP, the first DNS address space, the second ISP, or the second DNS address space; and

forwarding the at least one network request to the determined proxy server, wherein the combined autoconfiguration script is configured to split traffic among the first and the second proxy servers based on the traffic destination by performing the determining step for each of the at least one network request.

14. The article of manufacture of claim 13, the actions further comprising:

configuring a client browser of the client device to employ the combined autoconfiguration script.

15. The article of manufacture of claim 13, the actions further comprising:

receiving yet additional information that is associated with a third proxy server,

wherein the combined autoconfiguration script further comprises at least part of the yet additional information.

16. A network device for managing proxy configurations, comprising:

a transceiver that is configured to send and receive signals over a network; and

a proxy configuration manager that is configured to perform actions, the actions comprising;

requesting information that is associated with a first proxy server that is associated with a first Internet Service Provider (ISP) and associated with a first Domain Name System (DNS) address space, wherein the first proxy server is arranged to proxy traffic over a virtual private network (VPN), wherein the VPN is associated with a VPN manager;

requesting additional information that is associated with a second proxy server that is associated with a second Internet Service Provider (ISP) and associated with a second Domain Name System (DNS) address space, wherein the first and the second ISPs are administratively distinct;

a transceiver that is configured to receive at least one of the information and the additional information over a network;

independently creating a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

receiving at least one network request that is associated with a network address;

configuring a client browser of the network device to perform autoconfiguration, including running the combined autoconfiguration script that determines which of the first and the second proxy servers to send the least one request that is associated with the network address to based on the association between the network address and one or more of the first ISP, the first DNS address space, the second ISP or the second DNS address space; and

forwarding the at least one network request to the determined proxy server, wherein the combined autoconfiguration script is configured to split traffic between at least the first and the second proxy servers based on traffic destination by performing the determining step for each of the at least one network request.

17. A client device for managing proxy configurations, comprising:

a transceiver that is configured to send and receive signals over a network; and

a computer processor that is configured to perform actions, the actions comprising;

requesting information that is associated with a first proxy server, wherein the first proxy server is associated with a virtual private network (VPN), a first internet service provider (ISP), and a first Domain Name System (DNS) address space associated with the first ISP, wherein the VPN is associated with a VPN manager;

receiving the information;

requesting additional information that is associated with a second proxy server, wherein the second proxy server is associated with a second ISP and a second DNS address space, wherein the first and the second ISPs are administratively distinct;

receiving the additional information;

independently creating a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to a VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the additional information;

configuring a client browser of the client device to employ the combined autoconfiguration script in managing the proxy configurations;

receiving a network request that is associated with a network address;

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the network request to, based in part on the network address and the first DNS address space and the second DNS address space; and

forwarding the network request to the determined proxy server, wherein determining which proxy server to send the request comprises;

determining whether the requested network address is included in a list of hostnames included in the first DNS address space;

when the network address is included in the list, selecting the first proxy server to manage the requested network address; and

when the network address is not included in the list, selecting the second proxy server to manage the requested network address.

18. The client device of claim 17, wherein the information includes a URL of the first proxy server, and wherein the additional information includes a URL of the second proxy server.

19. The client device of claim 17, wherein the information includes a list of addresses that are associated with the first internet service provider, and wherein the additional information includes another list of addresses that are associated with the second ISP.

20. A system for managing proxy configurations, comprising:

a virtual private network manager that is configured to perform actions, the actions comprising;

providing access to a virtual private network; and

providing information that is associated with a first proxy server, wherein the first proxy server is associated with the virtual private network, a first Internet Service Provider (ISP), and associated with a first Domain Name System (DNS) address space; and

a client device including at least one computer processor that is configured to perform actions, the actions comprising;

configuring a browser for a default proxy configuration, wherein the default proxy configuration is associated with a second proxy server, and wherein the second proxy server is associated with another network, associated with a second ISP, and associated with a second DNS address space, wherein the first and the second ISPs are administratively distinct;

making a request to the virtual private network manager for access to the virtual private network;

making a request for the information;

receiving the information;

independently creating a combined autoconfiguration script based on current client proxy settings, without the current client proxy settings being provided to the VPN manager, wherein the combined autoconfiguration script comprises at least part of the information and at least part of the proxy configuration associated with the second proxy server;

configuring a client browser to employ the combined autoconfiguration script;

receiving a network request that is associated with a network address; and

running the combined autoconfiguration script that performs autoconfiguration, including determining which proxy server to send the network request to based on one or more of the first ISP, first DNS address space, the second ISP, or the second DNS address space, wherein determining which proxy server to send the network request to includes determining whether the network address is included in a list of hostnames included in the first DNS address space;

when the network address is included in the list, selecting the first proxy server to manage the requested network address; and

when the network address is not included in the list, selecting the second proxy server to manage the requested network address.