Network traffic management using port number redirection

• US 9,231,857 B1
• Filed: 05/11/2015
• Issued: 01/05/2016
• Est. Priority Date: 12/10/2014
• Status: Active Grant

• Current Assignee: iBoss
• Original Assignee: iBoss
• Inventors: Martini, Paul Michael
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US14/709,160
• Time in Patent Office: 239 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A first request is received from a device over a network. It is determined that the first request should be redirected, based at least in part on information included in the first request. A redirect message is sent to the device over the network. A second request is received that includes the address and the port number. Responsive to determining that the port number is on the predetermined list of port numbers, modifying the second request by removing the port number. The modified second request is sent to the address.

Claims

1. A method performed by data processing apparatuses, the method comprising:

maintaining data that corresponds, for each of a plurality of port numbers, to a corresponding modified port number

receiving, from a device over a network, a first request that includes an address that includes a first port number;

in response to receiving the first request, determining, based at least in part on information included in the first request, that the first request is to be redirected by determining that the first port number matches one of the plurality of port numbers in the maintained data;

in response to determining that the first request is to be redirected, sending, to the device over the network, a redirect message that includes the address and a second port number different than the first port number, wherein the second port number is the modified port number that corresponds to the matched port number in the plurality of port numbers in the maintained data;

receiving, from the device over the network, a second request that includes the address and the second port number;

determining that the port number is included in a predetermined list of port numbers;

responsive to determining that the port number is on the predetermined list of port numbers, modifying the second request by removing the second port number and inserting the first port number; and

sending the modified second request to the address.

2. The method of claim 1, the method further comprising:

receiving a message from the address, the message comprising the first port number;

modifying the message by replacing the first port number with the second port number; and

sending the message to the device.

3. The method of claim 1, the method further comprising:

receiving, from a device over a network, a third request that comprises a second address and a third port number;

in response to receiving the third request, determining that the third request is not to be redirected based at least in part on information included in the third request; and

in response to determining that the third request is not to be redirected, sending the third request to the second address.

4. The method of claim 1, wherein the first request and the second request are Hypertext Transfer Protocol (HTTP) requests.

5. The method of claim 1, wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a network gateway;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by a proxy server that is a different device than the network gateway.

6. The method of claim 5, wherein the proxy server is configured to perform, for at least some network traffic, at least one of the group consisting of sandboxing traffic, caching resources, logging traffic, and blocking traffic.

7. The method of claim 5, wherein the proxy server handles traffic in a selective manner based on a port number of messages of the traffic.

8. The method of claim 5, wherein the proxy server serves resources through the Web Cache Communication Protocol (WCCP).

9. The method of claim 1, wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a particular device;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by the particular device.

10. A non-transitory computer storage media encoded with computer program instructions that, when executed by one or more processors, cause a computer device to perform operations comprising:

maintaining data that corresponds, for each of a plurality of port numbers, to a corresponding modified port number

receiving, from a device over a network, a first request that includes an address that includes a first port number;

in response to receiving the first request, determining, based at least in part on information included in the first request, that the first request is to be redirected by determining that the first port number matches one of the plurality of port numbers in the maintained data;

in response to determining that the first request is to be redirected, sending, to the device over the network, a redirect message that includes the address and a second port number different than the first port number, wherein the second port number is the modified port number that corresponds to the matched port number in the plurality of port numbers in the maintained data;

receiving, from the device over the network, a second request that includes the address and the second port number;

determining that the port number is included in a predetermined list of port numbers;

responsive to determining that the port number is on the predetermined list of port numbers, modifying the second request by removing the second port number and inserting the first port number; and

sending the modified second request to the address.

11. The non-transitory storage media of claim 10, wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a network gateway;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by a proxy server that is a different device than the network gateway.

12. The non-transitory storage media of claim 10, wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a particular device;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by the particular device.

13. A system comprising:

one or more processors configured to execute computer program instructions; and

computer storage media encoded with computer program instructions that, when executed by one or more processors, cause a computer device to perform operations comprising;

maintaining data that corresponds, for each of a plurality of port numbers, to a corresponding modified port number

receiving, from a device over a network, a first request that includes an address that includes a first port number;

in response to receiving the first request, determining, based at least in part on information included in the first request, that the first request is to be redirected by determining that the first port number matches one of the plurality of port numbers in the maintained data;

in response to determining that the first request is to be redirected, sending, to the device over the network, a redirect message that includes the address and a second port number different than the first port number, wherein the second port number is the modified port number that corresponds to the matched port number in the plurality of port numbers in the maintained data;

receiving, from the device over the network, a second request that includes the address and the second port number;

determining that the port number is included in a predetermined list of port numbers;

responsive to determining that the port number is on the predetermined list of port numbers, modifying the second request by removing the second port number and inserting the first port number; and

sending the modified second request to the address.

14. The system of claim 13, the operations further comprising:

receiving a message from the address, the message comprising the first port number;

modifying the message by replacing the first port number with the second port number; and

sending the message to the device.

15. The system of claim 13, the operations further comprising:

receiving, from a device over a network, a third request that comprises a second address and a third port number;

in response to receiving the third request, determining that the third request is not to be redirected based at least in part on information included in the third request; and

in response to determining that the third request is not to be redirected, sending the third request to the second address.

16. The system of claim 13 wherein the first request and the second request are Hypertext Transfer Protocol (HTTP) requests.

17. The system of claim 13 wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a network gateway;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by a proxy server that is a different device than the network gateway.

18. The system of claim 17, wherein the proxy server is configured to perform, for at least some network traffic, at least one of the group consisting of sandboxing traffic, caching resources, logging traffic, and blocking traffic.

19. The system of claim 17, wherein the proxy server handles traffic in a selective manner based on a port number of messages of the traffic.

20. The system of claim 17, wherein the proxy server serves resources through the Web Cache Communication Protocol (WCCP).

21. The system of claim 13, wherein sending, to the device over the network, a redirect message comprising the address and a port number is performed by a particular device;

and

receiving, from the device over the network, a second request that comprises the address and the port number is performed by the particular device.