System and method for distributing heuristics to network intermediary devices

• US 9,237,068 B2
• Filed: 01/30/2011
• Issued: 01/12/2016
• Est. Priority Date: 01/30/2011
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Blue Coat Systems Incorporated (Gen Digital Inc.)
• Inventors: Porter, Kevin, Kelly, Thomas J., Lizon, Marcin Lukasz, Long, Darrell, Maki, Eric, Tremblay, Kim, Vance, Jennifer
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): GIDDINS, NELSON S
• Application Number:
  US13/017,027
• Publication Number:
  US 20120198038A1
• Time in Patent Office: 1,808 Days
• Field of Search: 709/223
• US Class Current: 1/1
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data

Abstract

A policy distribution server provides, on a subscription basis, policy updates to effect desired behaviors of network intermediary devices. The policy updates may specify caching policies, and may in some instances, include instructions for data collection by the network intermediary devices. Data collected in accordance with such instructions may be used to inform future policy updates distributed to the network intermediary devices.

Claims

1. A method, comprising distributing, from a policy distribution server to one or more network intermediary devices communicatively coupled to the policy distribution server, on a subscription basis, policy updates to effect desired behaviors of at least one network intermediary device from the one or more network intermediary devices, wherein the policy updates include instructions for data collection by the at least one network intermediary device, and data collected in accordance with said instructions are used as feedback to tune caching policy updates for the at least one network intermediary device that supplied the data collected, and wherein the nature and frequency of the data provided via this feedback process is subject to control of said subscription basis, and the tuned caching policy updates are distributed from the policy distribution server to the at least one network intermediary device.

2. The method of claim 1, wherein the caching policy updates comprise caching policy language files.

3. The method of claim 1, wherein the caching policy updates include directives for the network intermediary devices to cache or not cache one or more of specified web sites or specified objects.

4. The method of claim 1, wherein the caching policy updates include directives for the network intermediary devices to employ specific caching methodologies for specified web sites or specified objects.

5. The method of claim 1, wherein the caching policy updates include directives for the network intermediary devices to cache specified web sites or objects beyond their respective time to live.

6. The method of claim 1, wherein prior to distributing the policy updates, the network intermediary devices are authenticated.

7. The method of claim 6, wherein distributions to the network intermediary devices occur periodically and randomly from one another.

8. The method of claim 7, wherein the distributions to the network intermediary devices are made responsive to requests for same by the network intermediary devices.

9. The method of claim 1, wherein distributions to the network intermediary devices are made responsive to requests for same by the network intermediary devices, said requests being made according to schedules directed by previously distributed policy updates.

10. A system, comprising one or more network intermediary devices and a policy distribution server communicatively coupled to the network intermediary devices, the policy distribution server configured to deliver to the network intermediary devices, on a subscription basis, policy updates to effect desired behaviors of at least one network intermediary device from the one or more network intermediary devices, wherein the policy updates include instructions for data collection by the at least one network intermediary device, and data collected in accordance with said instructions are used as feedback to tune caching policy updates for the at least one network intermediary device that supplied the data collected, and wherein the nature and frequency of the data provided via this feedback process is subject to control of said subscription basis, and the tuned caching policy updates are distributed from the policy distribution server to the at least one network intermediary device.

11. The system of claim 10, wherein the caching policy updates comprise caching policy language files.

12. The system of claim 10, wherein the caching policy updates include some or all of:

directives for data collection by the network intermediary devices, directives for the network intermediary devices to cache or not cache one or more of specified web sites or specified objects, directives for the network intermediary devices to employ specific caching methodologies for specified web sites or specified objects, and directives for the network intermediary devices to cache specified web sites or objects beyond their respective time to live.

13. The system of claim 10, wherein prior to distributing the policy updates, the network intermediary devices are authenticated.

14. The system of claim 13, wherein distributions to the network intermediary devices occur periodically and randomly from one another.

15. The system of claim 14, wherein the distributions to the network intermediary devices are made responsive to requests for same by the network intermediary devices.

16. The system of claim 10, wherein distributions to the network intermediary devices are made responsive to requests for same by the network intermediary devices, said requests being made according to schedules directed by previously distributed policy updates.

17. A network intermediary device, comprising:

a processor;

a storage device connected to the processor; and

a set of instructions on the storage device that are executable by the processor, including;

a transactor software sub-routine configured to establish a connection at a beginning of a client/intermediary device communication, facilitate processing of a request and response throughout the communication, and close the connection at an end of the communication;

a policy administrator software sub-routine configured to maintain current versions of policies distributed to the network intermediary device from a policy distribution server, on a subscription basis, and assign to the transactor software sub-routine a most current version of a policy available at a beginning of the communication; and

a policy evaluator software sub-routine configured to collect statistics regarding operations of the transactor software sub-routine for various communications and policies for reporting to the policy distribution server, wherein (i) the transactor software sub-routine is further configured to handle the communication in accordance with an assigned policy specified by the policy administrator software sub-routine and perform designated activities in accordance with the assigned policy when the communication reaches specified checkpoints and (ii) the statistics are used as feedback to tune caching policy updates distributed from the policy distribution server to the network intermediary device that supplied the statistics that were collected and reported to the policy distribution server, and wherein the nature and frequency of the statistics provided via this feedback process is subject to control of said subscription basis.