Scalable network apparatus for content based switching or validation acceleration

• US 9,712,505 B2
• Filed: 04/30/2015
• Issued: 07/18/2017
• Est. Priority Date: 04/13/2000
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Malo, Jr., John A., Abjanic, John B., Marlatt, David A.
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Bucknor, Olanrewaju
• Application Number:
  US14/701,237
• Publication Number:
  US 20150237023A1
• Time in Patent Office: 810 Days
• Field of Search: None
• CPC Class Codes: A61B 5/6852 Catheters
• CPC Class Codes: G06F 16/986 Document structures and storage, e.g. HTML extensions
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 47/28 in relation to timing considerations
• CPC Class Codes: H04L 47/31 by tagging of packets, e.g. using discard eligibility [DE] bits
• CPC Class Codes: H04L 47/33 using forward notification
• CPC Class Codes: H04L 49/252 Store and forward routing
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/101 based on network conditions
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/562 Brokering proxy services
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A network apparatus is provided that may include one or more security accelerators. The network apparatus also includes a plurality of network units cascaded together. According to one embodiment, the plurality of network units comprise a plurality of content based message directors, each to route or direct received messages to one of a plurality of application servers based upon the application data in the message. According to another embodiment, the plurality of network units comprise a plurality of validation accelerators, each validation accelerator to validate at least a portion of a message before outputting the message.

Claims

1. A network apparatus comprising:

a processor; and

a memory;

wherein the network apparatus is to;

perform decryption of a message, the message comprising one or more headers and a message body;

send the decrypted message to a first message director of the network apparatus;

select an application server from a plurality of application servers based on application data within the message body of the decrypted message;

direct the decrypted message towards the selected application server;

send a second message to a second message director of the network apparatus when a spillover feature of the first message director is enabled and a loading criteria is met; and

select a second application server from the plurality of application servers based on application data within a message body of the second message, the second message to be decrypted by the network apparatus.

2. The network apparatus of claim 1, wherein the network apparatus further comprises content based switching decision logic.

3. The network apparatus of claim 1, wherein the loading criteria is based on whether the first message director can process the message within a predetermined time limit.

4. The network apparatus of claim 1, wherein the loading criteria is based on processing capacity of the first message director.

5. The network apparatus of claim 1, wherein the loading criteria is based on a traffic load of the first message director.

6. The network apparatus of claim 1, wherein the loading criteria is based on a predetermined number of active connections.

7. The network apparatus of claim 1, wherein the network apparatus is to forward the second message from the first message director to the second message director.

8. The network apparatus of claim 1, wherein the application data within the message body is to be assembled from a plurality of packets.

9. The network apparatus of claim 1, wherein the network apparatus is to add, at the first message director, a port number to the first message.

10. The network apparatus of claim 1, wherein the network apparatus is to add, at the first message director, an Internet Protocol (IP) address to the first message.

11. The network apparatus of claim 1, wherein the network apparatus is to add, at the first message director, a port number and an Internet Protocol (IP) address to the first message.

12. The network apparatus of claim 1, wherein the application data within the message body comprises business transaction information describing at least a portion of a transaction to occur with the selected application server.

13. The network apparatus of claim 1, wherein selecting an application server from the plurality of application servers based on application data comprises selecting the application server based on a match between the application data and a configuration pattern.

14. At least one non-transitory machine readable storage medium having instructions stored thereon, the instructions when executed by a processor to cause the processor to:

perform decryption of a message, the message comprising one or more headers and a message body;

select an application server from a plurality of application servers based on application data within the message body of the decrypted message;

direct the decrypted message towards the selected application server;

forward a second message to a second message director when a spillover feature of a first message director is enabled and a loading criteria is met; and

select a second application server from the plurality of application servers based on application data within a message body of the second message.

15. The at least one non-transitory machine readable storage medium of claim 14, wherein the loading criteria is based on whether the first message director can process the message within a predetermined time limit.

16. The at least one non-transitory machine readable storage medium of claim 14, wherein the loading criteria is based on processing capacity of the first message director.

17. The at least one non-transitory machine readable storage medium of claim 14, wherein the loading criteria is based on a traffic load of the first message director.

18. The at least one non-transitory machine readable storage medium of claim 14, wherein the loading criteria is based on a predetermined number of active connections.

19. The at least one non-transitory machine readable storage medium of claim 14, the instructions when executed by the processor to further cause the processor to forward, by the first message director, the second message to the second message director.

20. The at least one non-transitory machine readable storage medium of claim 14, wherein the application data within the message body is to be assembled from a plurality of packets.

21. The at least one non-transitory machine readable storage medium of claim 14, the instructions when executed by the processor to further cause the processor to add, at a first message director, a port number to the first message.

22. The at least one non-transitory machine readable storage medium of claim 14, the instructions when executed by the processor to further cause the processor to add, at a first message director, an Internet Protocol (IP) address to the first message.

23. The at least one non-transitory machine readable storage medium of claim 14, the instructions when executed by the processor to further cause the processor to add, at a first message director, a port number and an Internet Protocol (IP) address to the first message.

24. The at least one non-transitory machine readable storage medium of claim 14, wherein the application data within the message body comprises business transaction information describing at least a portion of a transaction to occur with the selected application server.

25. The at least one non-transitory machine readable storage medium of claim 14, wherein selecting an application server from the plurality of application servers based on application data comprises selecting the application server based on a match between the application data and a configuration pattern.

26. A system comprising:

a plurality of application servers;

a network apparatus comprising;

a processor; and

a memory;

wherein the network apparatus is to;

perform decryption of a message, the message comprising one or more headers and a message body;

send the decrypted message to a first message director of the network apparatus;

select an application server from the plurality of application servers based on application data within the message body of the decrypted message;

direct the decrypted message towards the selected application server;

send a second message to a second message director of the network apparatus when a spillover feature of the first message director is enabled and a loading criteria is met; and

select a second application server from the plurality of application servers based on application data within a message body of the second message, the second message to be decrypted by the network apparatus.

27. The system of claim 26, wherein the selected application server of the plurality of application servers is to perform a transaction specified by the application data within the message body of the decrypted message.

28. The system of claim 26, wherein the network apparatus further comprises content based switching decision logic.

29. The system of claim 26, wherein the loading criteria is based on a predetermined number of active connections.

30. The system of claim 26, wherein selecting an application server from the plurality of application servers based on application data comprises selecting the application server based a match between the application data and a configuration pattern.