Automatic health check and performance monitoring for applications and protocols using deep packet inspection in a datacenter

Patent metadata

Field	Value
Publication number	US-11750482-B2
Application number	US-202117334682-A
Country	US
Kind code	B2
Filing date	May 28, 2021
Priority date	Oct 30, 2015
Publication date	Sep 5, 2023
Grant date	Sep 5, 2023

Abstract

A method of collecting health check metrics for a network is provided. The method, at a deep packet inspector on a physical host in a datacenter, receives a copy of a network packet from a load balancer. The packet includes a plurality of layers. Each layer corresponds to a communication protocol in a plurality of communication protocols. The method identifies an application referenced in the packet. The method analyzes the information in one or more layers of the packet to determine metrics for the source application. The method sends the determined metrics to the load balancer.

First claim

What is claimed is:

1. A method of performing load balancing on a host computer, the method comprising:
at a load balancer executing on the host computer:
receiving a data message flow associated with a machine executing on the host computer;
directing a deep packet inspector executing on the host computer to examine the data message flow to extract a set of attributes related to the associated machine from which the data message flow originated;
receiving the set of attributes from the deep packet inspector; and
performing a load balancing operation for the data message flow based on the set of attributes.

2. The method of claim 1 , wherein the deep packet inspector analyzes information carried in headers of the data messages of the flow above a transport layer.

3. The method of claim 1 , wherein the set of attributes comprises a set of health metrics related to an application associated with the data message flow.

4. The method of claim 1 , wherein the set of attributes comprises identity of the source application.

5. The method of claim 1 , wherein the set of attributes comprises a response time of the application associated with the data message flow.

6. The method of claim 1 , wherein the set of attributes comprises one of a frequency of access to a database and a number of database operations performed by an application associated with the data message flow.

7. The method of claim 1 , wherein the set of attributes comprises an indication that an application associated with the data message flow has failed.

8. The method of claim 7 , wherein the failure of the application is indicated by a status code specified in a header layer over a transport layer of a data message of the flow.

9. The method of claim 1 , wherein the set of attributes comprises one or more error values extracted from the data message flow.

10. The method of claim 1 , wherein the set of attributes comprises one or more certificate parameters related to a connection session certificate associated with the data message flow.

11. A non-transitory machine readable medium storing a load balancer for execution by at least one processing unit of a host computer, the load balancer comprising sets of instructions for:
receiving a data message flow associated with a machine executing on the host computer;
directing a deep packet inspector executing on the host computer to examine the data message flow to extract a set of attributes related to the associated machine from which the data message flow originated;
receiving the set of attributes from the deep packet inspector; and
performing a load balancing operation for the data message flow based on the set of attributes.

12. The non-transitory machine readable medium of claim 11 , wherein the deep packet inspector analyzes information carried in headers of the data messages of the flow above a transport layer.

13. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises a set of health metrics related to an application associated with the data message flow.

14. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises identity of the source application.

15. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises a response time of the application associated with the data message flow.

16. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises one of a frequency of access to a database and a number of database operations performed by an application associated with the data message flow.

17. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises an indication that an application associated with the data message flow has failed.

18. The non-transitory machine readable medium of claim 17 , wherein the failure of the application is indicated by a status code specified in a header layer over a transport layer of a data message of the flow.

19. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises one or more error values extracted from the data message flow.

20. The non-transitory machine readable medium of claim 11 , wherein the set of attributes comprises one or more certificate parameters related to a connection session certificate associated with the data message flow.

Assignees

• Nicira Inc

Inventors

• Tiagi Alok S
• Jain Jayant
• Sengupta Anirban
• Nimmagadda Srinivas
• Lund Rick

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L43/04 Primary

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L67/1001

  for accessing one among a plurality of replicated servers · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title