Network traffic management using port number redirection

• US 9,742,859 B2
• Filed: 09/22/2016
• Issued: 08/22/2017
• Est. Priority Date: 12/10/2014
• Status: Active Grant

• Current Assignee: iBoss
• Original Assignee: iBoss
• Inventors: Martini, Paul Michael
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US15/273,534
• Publication Number:
  US 20170013078A1
• Time in Patent Office: 334 Days
• Field of Search: None
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A first request is received from a device over a network. It is determined that the first request should be redirected, based at least in part on information included in the first request. A redirect message is sent to the device over the network. A second request is received that includes the address and the port number. Responsive to determining that the port number is on the predetermined list of port numbers, modifying the second request by removing the port number. The modified second request is sent to the address.

Claims

1. A system comprising:

a client comprising a processor and memory, the client configured to perform operations comprising;

receive, from a user of the client, input indicating a universal resource locator (URL) and not indicating a port number;

responsive to receiving the input, display the URL;

responsive to receiving the input, generate a first request for a resource, the first request including a first network location identifying a location of the resource on a server, the first network location including the URL and a first port number;

transmit the first request;

receive, in response to transmitting the first request, a redirect message, the redirect message including a second network location, the second network location including the URL and a second port number;

generate, in response to receiving the redirect message, a second request including the second network location;

transmit the second request;

receive a second response containing a modified resource; and

display the modified resource with the display of the URL;

a network gateway comprising a processor and memory, the network gateway configured to perform operations comprising;

receive the first request;

determining that the URL is associated with a rule indicating proxying;

generate, in response to determining that the URL is associated with a rule indicating proxying, the redirect message; and

;

transmit the redirect message;

a proxy comprising a processor and memory, the proxy configured to perform operations comprising;

receive the second request;

generate, in response receiving the second request, a third request including the first network location;

transmit the third request;

receive a first response containing the resource;

generate the modified resource based on the resource;

transmit the second response containing the modified resource;

the server configured to;

receive the third request;

transmit a first response containing the resource;

a local network hosting the client, the local network configured to;

transmit messages between the client, the network gateway, and the proxy;

a wide-area network hosting the server, the wide-area network configured to;

transmit messages between the network gateway, the proxy, and the server; and

wherein the network gateway and the proxy are on the edge of the local network and on the edge of the wide-area network.

2. The system of claim 1, wherein:

to receive the input, the client is further configured to receive the input to a web browser application;

to display the URL, the client is further configured to display the URL in an address bar of the web browser; and

to display the modified resource with the display of the URL, the client is further configured to render the modified resource in the web browser contemporaneously with the display of the URL in the address bar of the web browser.

3. The system of claim 2, wherein to receive the input to a web browser application, the client is configured to receive keyboard input indicating typing of the URL.

4. The system of claim 1, wherein:

the resource comprises relative pointers; and

to display the modified resource with the display of the URL, the client is configured to complete the relative pointers into full path pointers based on the URL.

5. The system of claim 1, wherein the wide-area network comprises the Internet.

6. The system of claim 1, wherein:

the network gateway comprises a first computer processor and a first computer memory; and

the proxy comprises a second computer processor and a second computer memory.

7. The system of claim 1, wherein the first request is a first Transport Layer Security (TLS) Hello message and the second request is a second TLS Hello message.

8. The system of claim 1, wherein the first request is a first Simple Mail Transport Protocol (SMTP) message and the second request is a second SMTP message.

9. The system of claim 1, wherein the first request is a first Hypertext Transfer Protocol (HTTP) Get message and the second request is a second HTTP Get message.

10. The system of claim 1, wherein the first request and the second request are formatted according to a particular networking protocol;

and wherein the redirect message is formatted according to the same particular networking protocol.

11. A method performed by one or more computer apparatuses computer apparatus, the method comprising:

receiving, from a user of a client, input indicating a universal resource locator (URL) and not indicating a port number;

responsive to receiving the input, displaying, by the client, the URL;

responsive to receiving the input, generating, by the client, a first request for a resource, the first request including a first network location identifying a location of the resource on a server, the first network location including the URL and a first port number;

transmitting, by the client, the first request;

receiving, by a network gateway, the first request;

determining, by the network gateway, that the URL is associated with a rule indicating proxying;

generating, by the network gateway in response to determining that the URL is associated with a rule indicating proxying, a redirect message, the redirect message including a second network location, the second network location including the URL and a second port number;

transmitting, by the network gateway, the redirect message;

receiving, by the client in response to transmitting the first request, the redirect message;

generating, by the client in response to receiving the redirect message, a second request including the second network location;

transmitting, by the client, the second request;

receiving, by the proxy, the second request;

generating, by the proxy in response receiving the second request, a third request including the first network location;

transmitting, by the proxy, the third request;

receiving, by the server, the third request;

transmitting, by the server, a first response containing the resource;

receiving, by the proxy, the first response containing the resource;

generating, by the proxy, a modified resource based on the resource;

transmitting, by the proxy, a second response containing the modified resource;

receiving, by the client, the second response containing the modified resource; and

displaying, by the client, the modified resource with the display of the URL.

12. The method of claim 11, wherein:

receiving, from a user of a client, input indicating a universal resource locator (URL) and not indicating a port number comprises receiving the input to a web browser application;

displaying, by the client, the URL comprises displaying the URL in an address bar of the web browser; and

displaying, by the client, the modified resource with the display of the URL comprises rendering the modified resource in the web browser contemporaneously with the display of the URL in the address bar of the web browser.

13. The method of claim 12, wherein receiving the input to a web browser application comprises receiving keyboard input indicating typing of the URL.

14. The method of claim 11, wherein:

the resource comprises relative pointers; and

displaying, by the client, the modified resource with the display of the URL comprises completing relative pointers into full path pointers based on the URL.

15. The method of claim 11, wherein the first request is a first Transport Layer Security (TLS) Hello message and the second request is a second TLS Hello message.

16. The method of claim 11, wherein the first request is a first Simple Mail Transport Protocol (SMTP) message and the second request is a second SMTP message.

17. The method of claim 11, wherein the first request is a first Hypertext Transfer Protocol (HTTP) Get message and the second request is a second HTTP Get message.

18. The method of claim 11, wherein the first request and the second request are formatted according to a particular networking protocol;

and wherein the redirect message is formatted according to the same particular networking protocol.