Distributed multi-processing security gateway
US-9124550-B1 · Sep 1, 2015 · US
US10862955B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-10862955-B2 |
| Application number | US-201816004265-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 8, 2018 |
| Priority date | Sep 25, 2012 |
| Publication date | Dec 8, 2020 |
| Grant date | Dec 8, 2020 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Provided are methods and systems for dynamically distributing a service session from a client device. The method may commence with receiving a packet associated with the service session from the client device by a gateway node. The method may include determining that the packet matches a service address in a forwarding policy. The method may continue with selecting one of a plurality of forwarding nodes for sending the packet to the one of the plurality of forwarding nodes. The method may include receiving the packet of the service session by the one of the plurality of forwarding nodes. The method may continue with determining that the packet matches the service address serviced by a servicing node of a plurality of servicing nodes. The method may further include sending the packet to the servicing node for forwarding the packet to a server by the servicing node.
Opening claim text (preview).
What is claimed is: 1. A system for dynamically distributing a service session from a client device, the system comprising: a plurality of forwarding nodes; and a gateway node configured to: receive, from the client device, a packet of the service session, the packet being associated with a source network address; determine that the packet matches a service address in a forwarding policy; make a first selection by selecting, from the plurality of forwarding nodes, at least two forwarding nodes based on the service address and the forwarding policy, the at least two forwarding nodes serving the service address; upon selecting the at least two forwarding nodes, determine that the forwarding policy includes a first criterion instructing to select between the at least two forwarding nodes based on the source network address of the packet; based on the determining, making a second selection by selecting a first forwarding node of the at least two forwarding nodes based on the source network address and the forwarding policy for sending the packet to the first forwarding node, the first forwarding node serving the source network address; determine that the forwarding policy includes a second criterion with instructions to forward both the packet and further packets associated with the service session through an identical forwarding path, the identical forwarding path including a plurality of nodes, each of the plurality of nodes being configured to send the packet and the further packets forward along the identical forwarding path, wherein both the packet and the further packets comprise the source network address and a session identifier associated with the service session, and wherein the source network address does not include a cookie; update the forwarding policy by setting the first forwarding node as selectable for forwarding the further packets associated with the service session and comprising the source network address and the session identifier; wherein the first forwarding node is configured to: receive the packet of the service session from the gateway node; determine that the packet matches the service address in the forwarding policy; make a first selection by selecting, from a plurality of servicing nodes, at least two servicing nodes based on the service address and the forwarding policy, the at least two servicing nodes serving the service address; upon selecting the at least two servicing nodes, determine that the forwarding policy includes a third criterion instructing to select between the at least two servicing nodes based on the source network address of the packet; based on the determining, select a first servicing node of the at least two servicing nodes based on the source network address and the forwarding policy, the first servicing node serving the source network address; determine that the forwarding policy includes the second criterion with the instructions to forward both the packet and the further packets comprising the session identifier through the identical forwarding path; update the forwarding policy by setting the first servicing node as selectable for forwarding the further packets, wherein the first forwarding node and the first servicing node constitute the plurality of nodes of the identical forwarding path for the packet and the further packets comprising the source network address and the session identifier and are configured to send the packet and the further packets forward along the identical forwarding path; and send the packet to the first servicing node for forwarding the packet, by the first servicing node, directly to a server of a plurality of servers, wherein the first servicing node selects the server based on a service policy. 2. The system of claim 1 , wherein the forwarding policy comprises a further source network address. 3. The system of claim 2 , wherein the first forwarding node is further configured to: retrieve the source network address associated with the packet; and compare the source network address to the further source network address in the forwarding policy. 4. The system of claim 2 , wherein the source network address comprises an Internet Protocol (IP) address of the client device. 5. The system of claim 1 , further comprising the plurality of servicing nodes, wherein the first servicing node of the plurality of servicing nodes is configured to: receive the packet from the first forwarding node; determine whether the packet is a service request packet; and select the server to serve the service session. 6. The system of claim 5 , wherein the gateway node is further configured to receive, from a network controller, the forwarding policy, the forwarding policy comprising the service address serviced by one or more of the plurality of forwarding nodes; wherein each of the plurality of forwarding nodes is configured to receive, from the network controller, the forwarding policy, the forwarding policy further comprising the service address serviced by the plurality of servicing nodes; and wherein each of the plurality of servicing nodes is further configured to receive, from the network controller, the service policy for selecting the server from the plurality of servers. 7. The system of claim 6 , wherein each of the service address serviced by the one or more of the plurality of forwarding nodes and the service address serviced by the plurality of servicing nodes represents a network address for servicing the service session between the client device and the server. 8. The system of claim 1 , wherein the packet comprises at least a destination network address, wherein the gateway node determines that the packet matches the service address by determining that the destination network address of the packet matches the service address included in the forwarding policy. 9. The system of claim 1 , wherein the gateway node communicates with one or more of the plurality of forwarding nodes over a routing protocol session. 10. The system of claim 1 , wherein the plurality of forwarding nodes includes at least the first forwarding node and a second forwarding node, the forwarding policy further including predetermined criteria for selecting one of the first forwarding node and the second forwarding node. 11. A method for dynamically distributing a service session from a client device, the method comprising: receiving, by a gateway node, from the client device, a packet of the service session, the packet being associated with a source network address; determining, by the gateway node, that the packet matches a service address in a forwarding policy; making, by the gateway node, a first selection by selecting, from a plurality of forwarding nodes, at least two forwarding nodes based on the service address and the forwarding policy, the at least two forwarding nodes serving the service address; upon selecting the at least two forwarding nodes, determining, by the gateway node, that the forwarding policy includes a first criterion instructing to select between the at least two forwarding nodes based on the source network address of the packet; based on the determining, making, by the gateway node, a second selection by selecting, a first forwarding node of the at least two forwarding nodes based on the source network address and the forwarding policy for sending, by the gateway node, the packet to the first forwarding node, the first forwarding node serving the source network address; determining, by the gateway node, that the forwarding policy includes a second criterion with instructions to forward both the packet and further packets associated with the service session through an identical forwarding path, the
based on compliance of requirements or conditions with available server resources · CPC title
Server selection for load balancing · CPC title
Route determination based on the nature of the carried application · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.