Method and apparatus for automated determination between proxied and bypassed proxy connections

Patent metadata

Field	Value
Publication number	US-11178229-B2
Application number	US-201916523938-A
Country	US
Kind code	B2
Filing date	Jul 26, 2019
Priority date	Jul 26, 2019
Publication date	Nov 16, 2021
Grant date	Nov 16, 2021

Abstract

System and computer-implemented method in a cloud architecture including a mixed network having local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, uses a proxy inventory to determine whether a connection from a first computing object to a second computing object should be excluded from a proxy. The connection from the first computing object to the second computing object is performed based on the determination.

First claim

What is claimed is:

1. A computer-implemented method in a cloud architecture comprising a mixed network comprising local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, the method comprising:
detecting a connection request by a first computing object to create a connection to a second computing object;
querying a proxy inventory based on the connection request, wherein the proxy inventory comprises a plurality of entries corresponding to at least one of objects and destinations in the cloud architecture;
determining whether the connection should be excluded from a proxy based on the query, including locating an entry in the plurality of entries specifying at least one of an object and a destination corresponding to the connection request, wherein the entry further specifies an option selected from a first option that the connection is to be proxied and a second option that the connection is not to be proxied; and
performing the connection based on the determination.

2. The method of claim 1 , wherein the proxy inventory comprises a plurality of entries corresponding to the objects in the cloud architecture, and wherein locating the entry in the plurality of entries includes locating the entry in the plurality of entries specifying the object corresponding to the connection request.

3. The method of claim 2 , wherein at least one entry in the proxy inventory is associated with an object type.

4. The method of claim 2 , wherein the proxy inventory comprises an inventory of all objects in the cloud architecture.

5. The method of claim 1 , wherein the proxy inventory comprises a plurality of entries corresponding to the destinations in the cloud architecture, the method further comprising:
when the entry in the proxy inventory specifying the destination does not exist, attempting a communication without the proxy for the connection request;
when the communication without the proxy for the connection request is unsuccessful, attempting a communication with the proxy for the connection request; and
creating a new entry in the proxy inventory when one of the communication without the proxy and the communication with the proxy is successful.

6. The method of claim 5 , further comprising:
updating a time value associated with the entry, wherein the time value specifies a last used time.

7. A non-transitory computer-readable storage medium containing program instructions for determining proxy communications in a cloud architecture comprising a mixed network comprising local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, wherein execution of the program instructions by one or more processors causes the one or more processors to perform steps comprising:
detecting a connection request by a first computing object to create a connection to a second computing object;
querying a proxy inventory based on the connection request, wherein the proxy inventory comprises a plurality of entries corresponding to at least one of objects and destinations in the cloud architecture;
determining whether the connection should be excluded from a proxy based on the query, including locating an entry in the plurality of entries specifying at least one of an object and a destination corresponding to the connection request, wherein the entry further specifies an option selected from a first option that the connection is to be proxied and a second option that the connection is not to be proxied; and
performing the connection based on the determination.

8. The computer-readable storage medium of claim 7 , wherein the proxy inventory comprises a plurality of entries corresponding to the objects in the cloud architecture, and wherein locating the entry in the plurality of entries includes locating the entry in the plurality of entries specifying the object corresponding to the connection request.

9. The computer-readable storage medium of claim 8 , wherein at least one entry in the proxy inventory is associated with an object type.

10. The computer-readable storage medium of claim 8 , wherein the proxy inventory comprises an inventory of all objects in the cloud architecture.

11. The computer-readable storage medium of claim 7 , wherein the proxy inventory comprises a plurality of entries corresponding to the destinations in the cloud architecture and the execution of the program instructions by one or more processors further causes the one or more processors to perform steps comprising:
when the entry in the proxy inventory specifying the destination does not exist, attempting a communication without the proxy for the connection request;
when the communication without the proxy for the connection request is unsuccessful, attempting a communication with the proxy for the connection request; and
creating a new entry in the proxy inventory when one of the communication without the proxy and the communication with the proxy is successful.

12. The computer-readable storage medium of claim 11 , wherein the execution of the program instructions by one or more processors further causes the one or more processors to perform steps comprising:
updating a time value associated with the entry, wherein the time value specifies a last used time.

13. A system in a cloud architecture comprising a mixed network comprising local objects in a local network and external objects in an external network, wherein the external objects are accessed through proxy communications, the system comprising:
memory; and
one or more processors configured to:
detect a connection request by a first computing object to create a connection to a second computing object;
query a proxy inventory based on the connection request, wherein the proxy inventory comprises a plurality of entries corresponding to at least one of objects and destinations in the cloud architecture;
determine whether the connection should be excluded from a proxy based on the query, including locating an entry in the plurality of entries specifying at least one of an object and a destination corresponding to the connection request, wherein the entry further specifies an option selected from a first option that the connection is to be proxied and a second option that the connection is not to be proxied; and
perform the connection based on the determination.

14. The system of claim 13 , wherein the proxy inventory comprises a plurality of entries corresponding to objects in the cloud architecture, and the one or more processors is configured to locate the entry in the plurality of entries specifying the object corresponding to the connection request.

15. The system of claim 14 , wherein at least one entry in the proxy inventory is associated with an object type.

16. The system of claim 14 , wherein the proxy inventory comprises an inventory of all objects in the cloud architecture.

17. The system of claim 13 , wherein the proxy inventory comprises a plurality of entries corresponding to the destinations in the cloud architecture, and the one or more processors are further configured to:
when the entry in the proxy inventory specifying the destination does not exist, attempt a communication without the proxy for the connection request;
when the communication without the proxy for the connection request is unsuccessful, attempt a communication with the proxy for the connection request; and
create a new entry in the proxy inventory when one of the communication without the pr

Assignees

• Vmware Inc

Inventors

• Masurekar Uday
• Stepanenko Sergii
• Sabin Todd
• Rosas Gabe

Classifications

• H04L67/141 Primary

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L67/56

  Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title