Deployment of a custom address to a remotely managed computational instance

Patent metadata

Field	Value
Publication number	US-11297034-B2
Application number	US-201916716214-A
Country	US
Kind code	B2
Filing date	Dec 16, 2019
Priority date	Oct 17, 2017
Publication date	Apr 5, 2022
Grant date	Apr 5, 2022

Abstract

An example embodiment may include a computational instance and a computing device within a remote network management platform. The computing device may be configured to: receive, from a client device of the managed network, a request to redirect, to a second URL, future requests addressed to a first URL; provide, to the client device, instructions to generate a certificate that binds an identity of the entity that operates the managed network to the first URL; receive, from the client device, the certificate; store the certificate and a corresponding cryptographic key; and generate a mapping between the first URL and the second URL. The computational instance may be configured to, in response to receiving a content request referencing the destination, generate a content response containing content from the destination, where any hyperlinks to the second URL in the content are replaced with hyperlinks to the first URL.

First claim

What is claimed is:

1. A system, comprising:
one or more hardware processors; and
a non-transitory memory, the non-transitory memory storing instructions that, when executed by the one or more hardware processors, causes the one or more hardware processors to perform actions comprising:
receiving, from a client device of a managed network, via a configuration interface, a request to map a first uniform resource locator (URL) to a second URL, wherein the first URL has a destination within a computational instance assigned to the managed network, and wherein the second URL is textually related to an entity that operates the managed network,
generating a mapping between the first URL and the second URL;
providing instructions to create a record on a domain name system (DNS) associated with the second URL, wherein the record indicates the mapping of the first URL to the second URL; and
providing instructions to the computational instance to perform operations comprising:
receiving a content request referencing and containing content from the destination;
determining that the content request contains an indication that the content request was initially addressed to the first URL and was received from a search engine web crawler; and
generating a second content response containing metadata configured to:
cause the search engine web crawler to omit associating the content with the first URL at a search engine index; and
redirect the search engine web crawler to access the content by way of the second URL.

2. The system of claim 1 , wherein the actions comprise:
providing, to the client device, via the configuration interface, instructions to generate a certificate that binds an identity of the entity that operates the managed network to the second URL; and
receiving, from the client device, via the configuration interface, the generated certificate.

3. The system of claim 2 , wherein the actions comprise:
storing the generated certificate and a corresponding cryptographic key on a remote network management platform of the computational instance.

4. The system of claim 1 , wherein the computational instance is configured to:
receive, from a second client device, a content request referencing the destination associated with the first URL;
generate a content response containing content from the destination, wherein any hyperlinks to the first URL in the content are replaced with hyperlinks to the second URL in accordance with the mapping; and
transmit, to the second client device, the content response.

5. The system of claim 4 , wherein the content request comprises an indication that the content request was initially addressed to the second URL, and wherein any hyperlinks to the first URL in the content are replaced with hyperlinks to the second URL, based on the content request including the indication.

6. The system of claim 1 , wherein the actions comprise:
verifying the second URL, comprising:
confirming that the DNS resolves the second URL to an internet protocol (IP) address of a remote network management platform rather than an IP address of the managed network.

7. The system of claim 1 , wherein generating the mapping between the first URL and the second URL comprises associating the second URL with a file system path that is included in the first URL, and wherein the file system path is at the destination.

8. The system of claim 1 , wherein the destination is a virtual address assigned to a load balancer, and wherein the load balancer is configured to distribute content requests addressed to the virtual address amongst a plurality of server devices, each with access to the content.

9. A method for mapping a first uniform resource locator (URL) to a destination corresponding to a second URL, the method comprising:
receiving, from a client device of a managed network, via a configuration interface, a request to map a first URL to a second URL, wherein the first URL has a destination within a computational instance assigned to the managed network, and wherein the second URL is textually related to an entity that operates the managed network;
generating a mapping between the first URL and the second URL;
providing instructions to create a record on a domain name system (DNS) associated with the second URL, wherein the record indicates the mapping of the first URL to the second URL; and
providing instructions to the computational instance to perform operations comprising:
receiving a content request referencing and containing content from the destination;
determining that the content request contains an indication that the content request was initially addressed to the first URL and was received from a search engine web crawler; and
generating a second content response containing metadata configured to:
cause the search engine web crawler to omit associating the content with the first URL at a search engine index; and
redirect the search engine web crawler to access the content by way of the second URL.

10. The method of claim 9 , comprising:
generating, via the configuration interface, a network configuration indicating a plurality of network parameters such that incoming requests addressed to the second URL of the managed network are routed to the destination within the computational instance addressed by the first URL.

11. The method of claim 9 , wherein the destination is a virtual address assigned to a load balancer, and wherein the load balancer is configured to distribute content requests addressed to the virtual address amongst a plurality of server devices, each with access to the content.

12. The method of claim 9 , comprising:
providing, to the client device, via the configuration interface, instructions to generate a certificate that binds an identity of the entity that operates the managed network to the second URL; and
receiving, from the client device, via the configuration interface, the generated certificate.

13. The method of claim 12 , comprising:
storing the generated certificate and a corresponding cryptographic key on a remote network management platform associated with the computational instance.

14. A non-transitory computer-readable medium comprising computer readable code, that when executed by one or more processors, causes the one or more processors to perform operations comprising:
receiving, from a client device of a managed network, via a configuration interface, a request to map a first uniform resource locator (URL) to a second URL, wherein the first URL has a destination within a computational instance assigned to the managed network, and wherein the second URL is textually related to an entity that operates the managed network;
generating a mapping between the first URL and the second URL;
providing instructions to create a record on a domain name system (DNS) associated with the second URL, wherein the record indicates the mapping of the first URL to the second URL; and
providing instructions to the computational instance to configure an identity provider (IdP) to authenticate, using single sign-on (SSO) authentication, client devices associated with the managed network to access, by way of content requests initially addressed to the second URL, the destination, and wherein the computational instance is configured to:
receive, from a client device, a content request referencing the destination;
in response to receiving the content request, determine that the client device has not been authenticated to access the content;
determine that the content request was initially addressed to the second URL;
based on determining that the client device has not

Assignees

• Servicenow Inc

Inventors

• Deverakonda Venkata Subbaraya Kumar
• Xu Kai
• Kaufmann Scott
• Smith Silas A

Classifications

• H04L61/5007 Primary

  Internet protocol [IP] addresses · CPC title

• H04L2101/668

  Internet protocol [IP] address subnets · CPC title

• H04L2101/663

  Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports · CPC title

• H04L2101/30

  Types of network names · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title