Software defined dynamic filtering

Patent metadata

Field	Value
Publication number	US-10349304-B2
Application number	US-201514863339-A
Country	US
Kind code	B2
Filing date	Sep 23, 2015
Priority date	Sep 23, 2015
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

Techniques that provide for intelligent routing of mobile device traffic using custom protocols or protocols that are otherwise unsuitable for optimization by a mobile accelerator system are discussed herein. Some embodiments may include a point-of-presence (POP) configured to manage a dynamic listing defining a listing of content server associated with traffic that is not suitable for being optimized. Upon receiving traffic from the content server, the POP may be configured to access the dynamic filter, and route data transfers between the mobile device and the content server to bypass the mobile accelerator system when indicated by the dynamic filter. The POP may be further configured to update the dynamic filter, such as by adding or removing content servers based on parsing associated traffic for optimization suitability and/or protocol use.

First claim

That which is claimed:

1. A mobile accelerator system, comprising:
a point of presence (POP), including:
a proxy server configured to:
receive traffic associated with a content server, wherein the traffic uses a port associated with a predefined protocol;
determine, based on accessing a dynamic filter, whether the content server has been associated with traffic that fails to use the predefined protocol, wherein the dynamic filter defines a list of content servers that have been associated with traffic that uses the port but fails to use the predefined protocol; and
in response to determining that the content server has not been associated with traffic that fails to use the predefined protocol:
analyze the traffic to determine whether the traffic currently is using the predefined protocol; and
in response to determining that the traffic currently fails to use the predefined protocol, update the dynamic filter such that the content server is associated with traffic that fails to use the predefined protocol.

2. The mobile accelerator system of claim 1 , wherein:
the dynamic filter defines a time to live (TTL) associated with the content server;
the proxy server configured to determine, based on accessing the dynamic filter, whether the content server has been associated with traffic that fails to use the predefined protocol includes the proxy server being configured to determine, based on accessing the dynamic filter, whether a TTL associated with the content server has lapsed; and
the proxy server configured to update the dynamic filter such that the content server is associated with traffic that fails to use the predefined protocol includes the proxy server being configured to update the dynamic filter such that a new TTL is associated with the content server.

3. The mobile accelerator system of claim 1 , wherein the proxy server is further configured to, in response to determining that the traffic currently fails to use the predefined protocol, route data transfers between a mobile device and second content server to bypass the mobile accelerator system.

4. The mobile accelerator system of claim 1 , wherein the proxy server is further configured to, in response to determining that the traffic currently is using the predefined protocol:
optimize the traffic based on the predefined protocol;
determine a dynamic path between a mobile device and the content server through the proxy server; and
route data transfers between the mobile device and the content server through the dynamic path.

5. The mobile accelerator system of claim 1 , wherein:
the POP is an entry POP;
a dynamic path includes the entry POP and an exit POP; and
the mobile accelerator system includes a plurality of interconnected POPs including the entry POP and the exit POP.

6. The mobile accelerator system of claim 1 , wherein the proxy server is further configured to:
receive second traffic associated with a second content server, wherein the second traffic utilizes the port associated with the predefined protocol;
determine, based on accessing the dynamic filter, whether the second content server has been associated with traffic that fails to use the predefined protocol; and
in response to determining that the second content server has been associated with traffic that fails to use the predefined protocol, route data transfers between a mobile device and the second content server to bypass the mobile accelerator system without analyzing the second traffic to determine whether the second traffic currently is using the predefined protocol.

7. The mobile accelerator system of claim 1 , wherein the POP further includes:
a virtual private network (VPN) server configured to:
create a dedicated transport channel with a mobile device;
receive the traffic associated with the content server from the mobile device via the dedicated transport channel;
determine whether the traffic is utilizing the port associated with the predefined protocol; and
in response to determining that the traffic is utilizing the port associated with the predefined protocol, send the traffic to the proxy server.

8. The mobile accelerator system of claim 1 , wherein the proxy server configured to analyze the traffic to determine whether the traffic currently is using the predefined protocol includes the proxy server being configured to parse the traffic.

9. The mobile accelerator system of claim 1 , wherein:
the port is a transmission control protocol (TCP) port 80;
the predefined protocol is hypertext transfer protocol (HTTP).

10. The mobile accelerator system of claim 1 , wherein:
the port is a TCP port 443; and
the predefined protocol is secure hypertext transfer protocol (HTTPS).

11. The mobile accelerator system of claim 1 , wherein:
the dynamic filter includes a data entry associated with the content server, the data entry including an internet protocol (IP) prefix, a netmask, the port, and a TTL.

12. A method, comprising:
receiving, by a point of presence (POP) of a mobile accelerator system, traffic associated with a content server, wherein the traffic uses a port associated with a predefined protocol;
determining, by the POP and based on accessing a dynamic filter, whether the content server has been associated with traffic that fails to use the predefined protocol, wherein the dynamic filter defines a list of content servers that have been associated with traffic that uses the port but fails to use the predefined protocol; and
in response to determining that the content server has not been associated with traffic that fails to use the predefined protocol, and by the POP:
analyzing the traffic to determine whether the traffic currently is using the predefined protocol; and
in response to determining that the traffic currently fails to use the predefined protocol, updating the dynamic filter such that the content server is associated with traffic that fails to use the predefined protocol.

13. The method of claim 12 , wherein:
the dynamic filter defines a time to live (TTL) associated with the content server;
determining, based on accessing the dynamic filter, whether the content server has been associated with traffic that fails to use the predefined protocol includes determining, based on accessing the dynamic filter, whether a TTL associated with the content server has lapsed; and
updating the dynamic filter such that the content server is associated with traffic that fails to use the predefined protocol includes updating the dynamic filter such that a new TTL is associated with the content server.

14. The method of claim 12 further comprising, by the POP and in response to determining that the traffic currently fails to use the predefined protocol, route data transfers between a mobile device and second content server to bypass the mobile accelerator system.

15. The method of claim 12 further comprising, by the POP and in response to determining that the traffic currently is using the predefined protocol:
optimizing the traffic based on the predefined protocol;
determining a dynamic path between a mobile device and the content server through a proxy server; and
routing data transfers between the mobile device and the content server through the dynamic path.

16. The method of claim 12 , wherein:
the POP is an entry POP;
a dynamic path includes the entry POP and an exit POP; and
the mobile accelerator system includes a plurality of interconnected POPs including the entry POP and the exit POP.

17. The method of claim 12 further comprising, by the POP:
receiving secon

Assignees

• Cloudflare Inc

Inventors

• Kim Jeff Sesung
• Choi Jun Ho

Classifications

• H04W40/00

  Communication routing or communication path finding · CPC title

• H04W88/182

  Network node acting on behalf of an other network entity, e.g. proxy · CPC title

• H04L67/00

  Network arrangements or protocols for supporting network services or applications (user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00) · CPC title

• H04L45/306 Primary

  Route determination based on the nature of the carried application · CPC title

• H04W28/0263

  involving mapping traffic to individual bearers or channels, e.g. traffic flow template [TFT] · CPC title