Systems and Methods for Real-time Configurable Load Determination

• US 20180034832A1
• Filed: 07/29/2016
• Published: 02/01/2018
• Est. Priority Date: 07/29/2016
• Status: Active Grant

• Current Assignee: Fortinet Inc.
• Original Assignee: ShieldX Networks, Inc. (Fortinet Inc.)
• Inventors: Ahuja, Ratinder Paul Singh, Nedbal, Manuel
• Granted Patent: US 10,313,362 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1029 using data related to the state of servers by a load balancer
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Systems and methods are described herein generally relating to network security, and in particular, embodiments described generally relate to real-time configurable load determination. For example, a method is disclosed, which calls for receiving a request to perform a security service, performing the security service on data included with the request; calculating a service load associated with and during the performing the security service, and transmitting a response to the request, wherein the response includes the calculated service load.

Claims

1. A method comprising:

receiving a request to perform a security service;

performing the security service on data included with the request;

calculating a service load associated with and during the performing the security service; and

transmitting a response to the request, wherein the response includes the calculated service load.

2. The method of claim 1, wherein the service load comprises a first property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput.

3. The method of claim 2, wherein the service load further comprises a first property scaling to scale the first property value to a uniform range.

4. The method of claim 3, wherein the service load further comprises a first property weighting to weight the scaled first property value to reflect its relevance to the security service being performed.

5. The method of claim 4, the service load further comprising a second property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the second property value to be scaled according to a second property scaling and weighted according to a second property weighting.

6. The method of claim 5, the service load further comprising a third property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the third property value to be weighted according to a third property weighting.

7. The method of claim 1, wherein the service load comprises a property value, a property scaling, and a property weighting.

8. A system comprising:

a memory to store data generated by and used by a processor;

the processor to execute instructions to implement a first security microservice, the first security microservice to perform a process comprising;

receiving a request to perform a security service;

performing the security service on data included with the request;

calculating a service load associated with and during the performing the security service; and

transmitting a response to the request, wherein the response includes the calculated service load.

9. The system of claim 8, wherein the service load comprises a first property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput.

10. The system of claim 9, wherein the service load further comprises a first property scaling to scale the first property value to a uniform range.

11. The system of claim 10, wherein the service load further comprises a first property weighting to weight the scaled first property value to reflect its relevance to the security service being performed.

12. The system of claim 11, the service load further comprising a second property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the second property value to be scaled according to a second property scaling and weighted according to a second property weighting.

13. The system of claim 12, the service load further comprising a third property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the third property value to be weighted according to a third property weighting.

14. The system of claim 8, wherein the service load comprises a property value, a property scaling, and a property weighting.

15. A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method comprising:

receiving a request to perform a security service;

performing the security service on data included with the request;

calculating a service load associated with and during the performing the security service; and

transmitting a response to the request, wherein the response includes the calculated service load.

16. The non-transitory computer-readable medium of claim 15, wherein the service load comprises a first property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput.

17. The non-transitory computer-readable medium of claim 16, wherein the service load further comprises a first property scaling to scale the first property value to a uniform range.

18. The non-transitory computer-readable medium of claim 17, wherein the service load further comprises a first property weighting to weight the scaled first property value to reflect its relevance to the security service being performed.

19. The non-transitory computer-readable medium of claim 18, the service load further comprising a second property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the second property value to be scaled according to a second property scaling and weighted according to a second property weighting.

20. The non-transitory computer-readable medium of claim 19, the service load further comprising a third property value selected from a group consisting of processor utilization, memory utilization, disk capacity, disk throughput, input/output throughput, and event throughput, the third property value to be weighted according to a third property weighting.