Span out load balancing model

• US 9,292,248 B2
• Filed: 06/22/2011
• Issued: 03/22/2016
• Est. Priority Date: 06/22/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Das, Archan, Kannan, Gopikrishna, Balachandran, Ravi K., Bucha, Vikash
• Primary Examiner(s): Abrishamkar, Kaveh
• Assistant Examiner(s): Wilcox, James J
• Application Number:
  US13/166,021
• Publication Number:
  US 20120331300A1
• Time in Patent Office: 1,735 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 3/1454 involving copying of the display data of a local workstation or window to a remote workstation or window so that an actual copy of the data is displayed simultaneously on two or more displays, e.g. teledisplay
• CPC Class Codes: G06F 9/452 Remote windowing, e.g. X-Window System, desktop virtualisation protocols for virtual reality H04L67/131
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

This document describes techniques for transporting at least a portion of the data for a remote presentation session via datagrams. In particular, a span-out model is described whereby a remote presentation session can be associated with multiple channels and each channel can be routed through a different gateway computer system. As such, a connectionless oriented channel for a client may be routed through a first gateway computer system and a connection oriented channel for the client may be routed through a second gateway computer system. In addition to the foregoing, other techniques are described in the claims, the attached drawings, and the description.

Claims

1. A system, comprising:

a processor; and

a memory coupled to the processor, the memory including instructions that upon execution cause the system at least to;

send a first datagram from the remote presentation session, the first datagram addressed to a private network address for a second gateway, the first datagram including first data for the remote presentation session, wherein the second gateway has a second network address for a client that is associated with the private network address for the second gateway, a network address for a remote presentation session, and a connection identifier, wherein the client is also associated with a first network address and configured to receive packets from a first gateway over a connection oriented channel to via the first network address, and wherein the connection oriented channel is also associated with the connection identifier;

and wherein the second gateway sends the first data in a second datagram to the second network address for the client in response to determining that the private network address for the second gateway is associated with the second network address for the client.

2. The system of claim 1, the memory further comprising instructions that upon execution cause the system at least to:

send a third datagram from the remote presentation session, the third datagram addressed to a private network address for a third gateway, the third datagram including second data for the remote presentation session, wherein the third gateway has a third network address for the client associated with the private network address for the third gateway, the network address for the remote presentation session, and the connection identifier;

and wherein the third gateway sends the second data in a fourth datagram to the third network address for the client in response to determining that the private network address for the third gateway is associated with the third network address for the client.

3. The system of claim 2, wherein sending the second data further comprises sending data indicative of audio in the fourth datagram to the third network address for the client.

4. The system of claim 2, wherein the first memory further comprises instructions that upon execution cause the system at least to:

send an encrypted package and a redirection request to the client, the encrypted package including the connection identifier and the network address for the remote presentation session in a payload, the redirection request including a public network address for the first gateway, a public network address for the second gateway, and a public network address for the third gateway.

5. The system of claim 4, wherein the second gateway

extracts the encrypted package from a first connection datagram, the connection datagram addressed from the second network address for the client;

and

validates a digital signature in the package with a key.

6. The system of claim 1, wherein sending the first data further comprises:

sending data indicative of a graphical user interface in the second datagram to the second network address for the client.

7. The system of claim 1, wherein

resources on the second gateway used to route data for the remote presentation session are deallocated in response to receipt of a disconnect message indicating that the connection oriented channel was closed.

8. The system of claim 1, wherein

resources on the second gateway used to route data for the remote presentation session are deallocated in response to a determination that a timer expired, the timer being refreshed each time a datagram for the remote presentation session is received by the second gateway.

9. The system of claim 1, wherein the second gateway is selected by a load balancer.

10. A computer-readable storage device including instructions that upon execution by a processor cause a first gateway to:

extract a connection request from a datagram received on a port, the datagram addressed from a client network address for a client, the datagram including a cookie in a payload, the cookie including a resource network address for a remote presentation session and a connection identifier associated with a connection oriented channel established on a second gateway between the remote presentation session and the client;

associate the connection identifier with the client network address, a private network address for the first gateway, and the resource network address;

receive a second datagram from the remote presentation session, the second datagram addressed to the private network address, the second datagram including data for the remote presentation session; and

send the data for the remote presentation session in a third datagram to the client network address in response to determining that the private network address is associated with the client network address.

11. The computer-readable storage device of claim 10, wherein the instructions that upon execution cause the first gateway to send the data for the remote presentation session in the second datagram to the client further comprises:

send data indicative of a graphical user interface in the datagram to the client network address.

12. The computer-readable storage device of claim 10, further comprising instructions that upon execution cause the first gateway to:

validating a digital signature stored in the cookie using a copy of an encryption key stored on both the first gateway and the second gateway.

13. The computer-readable storage device of claim 10, further comprising instructions that upon execution cause the first gateway to:

deallocate resources on the first gateway used to route data for the remote presentation session between the client and the remote presentation session in response to receipt of a disconnect message indicating that the connection oriented channel established on the second gateway between the second gateway and the client was closed.

14. The computer-readable storage device of claim 10, further comprising instructions that upon execution cause the first gateway to:

deallocate resources on the first gateway used to route data for the remote presentation session between the client and the remote presentation session in response to a determination that a timer expired, the timer being refreshed each time a datagram for the remote presentation session is received by the second gateway.

15. A computer implemented method, comprising:

extracting, by a first gateway, a cookie from a uniform datagram protocol datagram received on a uniform datagram protocol port, the datagram addressed from an internet protocol address port number combination associated with a client;

validating, by the first gateway, a digital signature of the cookie, the cookie including an internet protocol address port number combination for a remote presentation session and a connection identifier associated with a connection oriented channel established on a second gateway between the remote presentation session and the client;

associate, by the first gateway, the connection identifier with the internet protocol address port number combination for the client and the internet protocol address port number combination for the remote presentation session;

receive, by the first gateway, a first datagram from the client, the first datagram addressed to a public internet protocol address port number combination for the first gateway, the first datagram including data for the remote presentation session; and

send, by the first gateway, the data in a second datagram to the internet protocol address port number combination for the remote presentation session in response to determining that the internet protocol address port number combination for the client is associated with the internet protocol address port number combination for the remote presentation session.

16. The computer implemented method of claim 15, further comprising:

deallocating resources on the first gateway used to route the data for the remote presentation session between the client and the remote presentation session in response to receipt of a disconnect message indicating that the connection oriented channel established on the second gateway between the second gateway and the client was closed.

17. The computer implemented method of claim 15, further comprising:

deallocating resources on the first gateway used to route the data for the remote presentation session between the client and the remote presentation session in response to a determination that a timer expired, the timer being refreshed each time a datagram for the remote presentation session is received by the second gateway.

18. The computer implemented method of claim 15, wherein validating the digital signature of the cookie further comprises:

validating the digital signature of the cookie, the cookie including an internet protocol address port number combination for a virtual desktop session.

19. The computer implemented method of claim 15, wherein validating the digital signature of the cookie further comprises:

validating the digital signature of the cookie, the cookie including an internet protocol address port number combination for a remote desktop session.

20. The computer implemented method of claim 15, wherein the second datagram comprises data indicative of a graphical user interface.