Methods to manage services over a service gateway

• US 9,979,801 B2
• Filed: 06/24/2015
• Issued: 05/22/2018
• Est. Priority Date: 12/23/2011
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Jalan, Rajkumar, Xu, Feilong, Sampat, Rishi
• Primary Examiner(s): Lazaro, David
• Assistant Examiner(s): Shaw, Robert
• Application Number:
  US14/749,072
• Publication Number:
  US 20150296058A1
• Time in Patent Office: 1,063 Days
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/255 Maintenance or indexing of mapping tables
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

In activating a service, a service gateway retrieves a service table entry using a service or server address of the service entry, where the service table entry has an association with another service entry. An association to the service entry is added and a marker value is set to indicate associations with two service entries. After a time duration, the association with the other service entry is removed, and the marker value is changed accordingly. In deactivating a service entry, the service gateway calculates a hash value for the service or server address of the service entry. After matching the hash value to a hash value of another service entry, an association with the other service entry is added. A marker value is set to indicate associations with two service entries. After a time duration, the association with the service entry is removed, and the marker value is changed accordingly.

Claims

1. A system for processing an uninterrupted service session comprising:

a service gateway communicatively coupled to a host using a first network and to a plurality of servers using a second network, the service gateway processing a service session between the host and at least one of the plurality of servers, the service gateway including a processor coupled to a memory, the memory storing instructions executable by the processor to perform a method comprising;

getting a first service entry, the first service entry including a service address and a first server address, the first service address including an address associated with the service gateway and a service identifier;

storing the first service entry with an active status designation in a service table entry of a service mapping table, the service mapping table including a plurality of service table entries, the table entry associated with the service;

starting a timer in response to storing the first service entry to calculate when a predetermined amount of time has elapsed;

changing a status designation of a second service entry to an inactive status designation in response to the timer having calculated the predetermined amount of time has elapsed, the second service entry stored in the service table entry, the second service entry including the service address and a second server address;

receiving a first data packet from the host, the first data packet including the service address;

determining a first server address associated with the service address using the first service entry;

modifying the first data packet, the modifying including replacing the service address with the first server address; and

forwarding the modified first data packet to the first server address.

2. The system of claim 1 wherein the method further comprises:

receiving a second data packet from the host, the second data packet including the service address;

determining a second server address associated with the service address;

modifying the second data packet, the modifying including replacing the service address with the second server address; and

forwarding the modified second data packet to the second server address.

3. The system of claim 2 wherein the determining the second server address comprises:

retrieving from the service mapping table the second service entry in the service table entry corresponding to the service address; and

identifying the second server address in the second service entry.

4. The system of claim 2 wherein the service mapping table is indexed using a hash function and the index is stored in a table index, and wherein the determining the second server address comprises:

applying the hash function to the service address to generate a hash value;

retrieving from the service mapping table the second service entry in the service table entry corresponding to the service address using the hash value and the status designation of the second service entry; and

identifying the second server address in the second service entry.

5. The system of claim 4 wherein the hash function is at least one of:

a checksum function, a cyclic redundancy check (CRC) function, bit-wise AND operator, bit-wise OR operator, bit-wise NAND operator, bit-wise NOR operator, MD5 hash function, cryptographic hash function, Jenkins hash function, table lookup function, hash function performed by an application specific integrated circuit (ASIC), and hash function performed by a field programmable gate array (FPGA).

6. The system of claim 1 wherein the determining the first server address comprises:

retrieving from the service mapping table the first service entry in the service table entry corresponding to the service address; and

identifying the first server address in the first service entry.

7. The system of claim 5 wherein the service table entry is indexed using a hash function and the index is stored in a table index, and wherein the determining the first server address comprises:

applying the hash function to the service address to generate a hash value;

retrieving from the service mapping table the first service entry in the service table entry corresponding to the service address using the hash value and the status designation of the first service entry; and

identifying the first server address in the first service entry.

8. The system of claim 7 wherein the hash function is at least one of:

a checksum function, a cyclic redundancy check (CRC) function, bit-wise AND operator, bit-wise OR operator, bit-wise NAND operator, bit-wise NOR operator, MD5 hash function, cryptographic hash function, Jenkins hash function, table lookup function, hash function performed by an application specific integrated circuit (ASIC), and hash function performed by a field programmable gate array (FPGA).

9. The system of claim 1 wherein

the service address includes at least one of:

a destination Internet Protocol (IP) address, an application layer address, and a destination transport layer port number,

the transport layer port number being at least one of a;

transmission control protocol (TCP) port number and a user datagram protocol (UDP) port number, and

the service identifier identifying at least one of a;

Hypertext Transport Protocol (HTTP) session, a secure HTTP session, a File Transfer Protocol (FTP) session, a file sharing protocol session;

a Session Initiation Protocol (SIP) session, a web session, a video and/or audio streaming session, and a web conferencing session.

10. A method for processing an uninterrupted service session by a service gateway communicatively coupled to a host using a first network and to a plurality of servers using a second network, the service gateway processing a service session between the host and at least one of the plurality of servers, the method comprising:

getting a first service entry, the first service entry including a service address and a first server address, the first service address including an address associated with the service gateway and a service identifier;

storing the first service entry with an active status designation in a service table entry of a service mapping table, the service mapping table including a plurality of service table entries, the table entry associated with the service;

starting a timer in response to storing the first service entry to calculate when a predetermined amount of time has elapsed;

changing a status designation of a second service entry to an inactive status designation in response to the timer having calculated the predetermined amount of time has elapsed, the second service entry stored in the service table entry, the second service entry including the service address and a second server address;

receiving a first data packet from the host, the first data packet including the service address;

determining a first server address associated with the service address using the first service entry;

modifying the first data packet, the modifying including replacing the service address with the first server address; and

forwarding the modified first data packet to the first server address.

11. The method of claim 10 further comprising:

receiving a second data packet from the host, the second data packet including the service address;

determining a second server address associated with the service address;

modifying the second data packet, the modifying including replacing the service address with the second server address; and

forwarding the modified second data packet to the second server address.

12. The method of claim 11 wherein the determining the second server address comprises:

retrieving from the service mapping table the second service entry in the service table entry corresponding to the service address; and

identifying the second server address in the second service entry.

13. The method of claim 11 wherein the service mapping table is indexed using a hash function and the index is stored in a table index, and wherein the determining the second server address comprises:

applying the hash function to the service address to generate a hash value;

retrieving from the service mapping table the second service entry in the service table entry corresponding to the service address using the hash value and the status designation of the second service entry; and

identifying the second server address in the second service entry.

14. The method of claim 13 wherein the hash function is at least one of:

a checksum function, a cyclic redundancy check (CRC) function, bit-wise AND operator, bit-wise OR operator, bit-wise NAND operator, bit-wise NOR operator, MD5 hash function, cryptographic hash function, Jenkins hash function, table lookup function, hash function performed by an application specific integrated circuit (ASIC), and hash function performed by a field programmable gate array (FPGA).

15. The method of claim 10 wherein the determining the first server address comprises:

retrieving from the service mapping table the first service entry in the service table entry corresponding to the service address; and

identifying the first server address in the first service entry.

16. The method of claim 14 wherein the service table entry is indexed using a hash function and the index is stored in a table index, and wherein the determining the first server address comprises:

applying the hash function to the service address to generate a hash value;

retrieving from the service mapping table the first service entry in the service table entry corresponding to the service address using the hash value and the status designation of the first service entry; and

identifying the first server address in the first service entry.

17. The method of claim 16 wherein the hash function is at least one of:

a checksum function, a cyclic redundancy check (CRC) function, bit-wise AND operator, bit-wise OR operator, bit-wise NAND operator, bit-wise NOR operator, MD5 hash function, cryptographic hash function, Jenkins hash function, table lookup function, hash function performed by an application specific integrated circuit (ASIC), and hash function performed by a field programmable gate array (FPGA).

18. The method of claim 10 wherein

the service address includes at least one of:

a destination Internet Protocol (IP) address, an application layer address, and a destination transport layer port number,

the transport layer port number being at least one of a;

transmission control protocol (TCP) port number and a user datagram protocol (UDP) port number, and

the service identifier identifying at least one of a;

Hypertext Transport Protocol (HTTP) session, a secure HTTP session, a File Transfer Protocol (FTP) session, a file sharing protocol session;

a Session Initiation Protocol (SIP) session, a web session, a video and/or audio streaming session, and a web conferencing session.

19. A method for processing an uninterrupted service session by a service gateway communicatively coupled to a host using a first network and to a plurality of servers using a second network, the service gateway processing a service session between the host and at least one of the plurality of servers, the method comprising:

receiving a first data packet from the host, the first data packet including a service address;

applying a hash function to the service address to generate a hash value;

retrieving from a service mapping table a first service entry in a service table entry corresponding to the service address using the hash value and a status designation of the first service entry, the service mapping table including a plurality of service table entries and being indexed using the hash function, the index being stored in a table index, the first service entry being stored in the service table entry and including the service address and a second server address, the service table entry being associated with a service;

identifying the first server address in the first service entry;

modifying the first data packet, the modifying including replacing the service address with the first server address;

forwarding the modified first data packet to the first server address;

getting a second service entry, the second service entry including the service address and a second server address, the second service address including an address associated with the service gateway and a service identifier;

storing the second service entry with an active status designation in the service table entry of the service mapping table;

starting a timer in response to storing the first service entry to calculate when a predetermined amount of time has elapsed;

changing a status designation of the first service entry to an inactive status designation in response to the timer having calculated the predetermined amount of time has elapsed;

receiving a second data packet from the host, the second data packet including the service address;

retrieving from the service mapping table the second service entry in the service table entry corresponding to the service address using the hash value and the status designation of the second service entry;

identifying the second server address in the second service entry;

modifying the second data packet, the modifying including replacing the service address with the second server address; and

forwarding the modified second data packet to the second server address.