Routing proxy for resource requests and resources

• US 9,647,871 B2
• Filed: 06/19/2013
• Issued: 05/09/2017
• Est. Priority Date: 06/15/2011
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Kohli, Jaspal
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US13/921,518
• Publication Number:
  US 20130290544A1
• Time in Patent Office: 1,420 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 67/1078 Resource delivery mechanisms
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

A device receives, from a client device, a request for a resource, where the request provides an identifier of the client device. The device selects a target device for the resource, connects with the selected target device, and provides a proxy of the request to the selected target device, where the proxy of the request hides the identifier of the client device. The device receives the resource from the selected target device, where the resource provides an identifier of the target device. The device provides a proxy of the resource to the client device, where the proxy of the resource hides the identifier of the target device.

Claims

1. A method comprising:

receiving, by a first device and from a second device, a request for a resource;

determining, by the first device, that a connection, associated with the request, is not to be terminated;

forwarding, by the first device and based on determining that the connection is not to be terminated, the request for additional routing;

determining, by the first device, that a different connection, associated with a different request for a different resource, is to be terminated;

providing, by the first device and based on determining that the connection is to be terminated, a proxy of the different request to a third device,

the proxy of the different request not including an internet protocol (IP) address of the second device; and

receiving at least a portion of the different resource as a response to the proxy of the different request.

2. The method of claim 1,

where the request includes internet protocol (IP) information, and

where determining that the connection is not terminated includes:

extracting the IP information from the request, and

determining that the connection is not terminated based on the IP information.

3. The method of claim 2, where the IP information includes at least one of:

a destination IP address,

the IP address of the second device, or

information identifying a destination port.

4. The method of claim 1, further comprising:

providing, to the second device, an indication that the connection is not terminated.

5. The method of claim 1, further comprising:

providing, to a routing server and based on determining that the different connection is to be terminated, a query for a source that stores the different resource; and

receiving, from the routing server, information identifying a location of the third device as the source for the different resource,

where providing the proxy of the different request to the third device comprises;

providing the proxy of the different request to the third device based on information identifying the location of the third device.

6. The method of claim 1, further comprising:

providing a proxy of the different resource to the second device,

the proxy of the different resource not including an IP address of the third device.

7. The method of claim 1, further comprising:

determining a fourth device as another source of the different resource based on determining that the different connection is to be terminated; and

receiving another portion of the different resource from the fourth device.

8. A first device comprising:

one or more processors to;

receive, from a second device, a request for a resource;

determine that a connection, associated with the request, is not to be terminated;

provide an indication that the connection is not terminated based on determining that the connection is not to be terminated;

determine that a different connection, associated with a different request for a different resource, is to be terminated;

provide, based on determining that the different connection is to be terminated, a proxy of the different request to a third device,

the proxy of the different request not including an internet protocol (IP) address of the second device; and

receive at least a portion of the different resource as a response to the proxy of the different request.

9. The first device of claim 8, where, when determining that the connection is not to be terminated, the one or more processors are to:

determine whether information in the request matches two or more items in a particular data structure, and

determine that the connection is not to be terminated when the information in the request does not match the two or more items in the particular data structure.

10. The first device of claim 8, where, when determining that the connection is not to be terminated, the one or more processors are to:

determine that the request includes a destination IP address of the third device that stores the resource,

determine that the request does not include the IP address of the second device, and

determine that the connection is not to be terminated based on the request including the destination IP address of the third device and not including the IP address of the second device.

11. The first device of claim 8, where the one or more processors are further to:

determine that the different resource is not stored in a local cache of the first device based on determining that the different connection is to be terminated; and

determine, after determining that the different resource is not stored in the local cache of the first device, the third device as a source of the different resource.

12. The first device of claim 8, where the one or more processors are further to:

receive a different portion of the different resource from a fourth device based on determining that the different connection is to be terminated.

13. The first device of claim 12, where the one or more processors are further to:

provide the portion to the second device before receiving the different portion, and

provide the different portion to the second device after receiving the different portion.

14. The first device of claim 8, where, when providing the indication that the connection is not terminated, the one or more processors are to:

provide, to the second device, the indication that the connection is not terminated.

15. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by at least one processor of a first device, cause the at least one processor to;

receive, from a second device, a request for a resource;

determine whether a connection, associated with the request, is to be terminated;

forward the request for additional routing when the connection is not to be terminated;

determine whether a different connection, associated with a different request for a different resource, is to be terminated;

provide, when the different connection is to be terminated, a proxy of the different request to a third device,

the proxy of the different request not including an internet protocol (IP) address of the second device; and

receive, when the different connection is to be terminated, at least a portion of the different resource as a response to the proxy of the different request.

16. The non-transitory computer-readable medium of claim 15, where the instructions further comprise:

one or more instructions that, when executed by the at least one processor, cause the at least one processor to;

provide, to the second device and when the different connection is to be terminated, a different indication that the different connection is terminated.

17. The non-transitory computer-readable medium of claim 15, where the instructions further comprise:

one or more instructions that, when executed by the at least one processor, cause the at least one processor to;

provide, to a particular server and based on the different request, a query for a source that stores the different resource, and

receive, from the particular server, information identifying a location of the third device.

18. The non-transitory computer-readable medium of claim 15, where the one or more instructions to determine whether the different connection is to be terminated comprise:

one or more instructions that, when executed by the at least one processor, cause the at least one processor to;

determine whether information in the different request matches one or more particular items in a particular data structure, and

determine that the different connection is to be terminated when the information in the different request matches the one or more particular items in the particular data structure.