Distributed telemetry and policy gateway in the cloud for remote devices

Patent metadata

Field	Value
Publication number	US-11863391-B2
Application number	US-202117338931-A
Country	US
Kind code	B2
Filing date	Jun 4, 2021
Priority date	Jun 4, 2021
Publication date	Jan 2, 2024
Grant date	Jan 2, 2024

Abstract

Systems and methods include connecting to and authenticating a plurality of user devices; utilizing a plurality of RESTful (Representational State Transfer web service) endpoints to communicate with the plurality of user devices; providing any of policy and configuration to the plurality of user devices utilizing version number via a RESTful endpoint; caching the any of policy and configuration for each device of the plurality of user devices; and receiving metrics based on measurements at the plurality of user devices according to corresponding policy and configuration, via a RESTful endpoint.

First claim

What is claimed is:

1. A method implemented in a Telemetry and Policy Gateway (TPG) node in a cloud-based system, the method comprising:
connecting to and authenticating a plurality of user devices;
utilizing a plurality of RESTful (Representational State Transfer web service) endpoints to communicate with a connector application running on each of the plurality of user devices;
managing version numbers of the plurality of user devices;
managing a cache, the cache including policies and configurations of one or more organizations, wherein the managing includes maintaining valid User Performance Management (UPM) configurations from each of the one or more organizations;
receiving a policy request from a connector application running on a user device of the plurality of user devices;
providing any of policy and configuration updates to the connector application utilizing the version numbers to optimize updates to the policy and configuration via a RESTful endpoint, wherein policy and configuration updates are provided to the connector application of the user device from the cache based on an associated organization only when there is a change in policy for the user device;
caching the any of policy and configuration for each device of the plurality of user devices; and
receiving metrics based on measurements at the plurality of user devices according to corresponding policy and configuration, via a RESTful endpoint.

2. The method of claim 1 , further comprising policy request and content of the cache:
performing any of (i) sending a code to the connector application indicating that no new policy is available, and (ii) obtaining the any of policy and configuration updates for a specific organization associate with the user device from a central authority associated with the cloud-based system when there is a new policy for the user device based on the version numbers.

3. The method of claim 1 , further comprising
publishing the received metrics to a cloud metric store associated with the cloud-based system.

4. The method of claim 1 , further comprising
aggregating received metrics from some or all of the plurality of devices; and
publishing the aggregated received metrics to a data store.

5. The method of claim 1 , further comprising
adding geo location information to the received metrics based on location identifiable parameters.

6. The method of claim 1 , wherein the cloud-based system includes the TPG node and one or more additional TPG nodes, each TPG node is stateless with respect to one another.

7. The method of claim 1 , wherein the received metrics are associated with user experience monitoring.

8. A Telemetry and Policy Gateway (TPG) node in a cloud-based system, the TPG node comprising:
one or more processors and memory storing instructions that, when executed, cause the one or more processors to
connect to and authenticating a plurality of user devices;
utilize a plurality of RESTful (Representational State Transfer web service) endpoints to communicate with a connector application running on each of the plurality of user devices;
manage version numbers of the plurality of user devices;
managing a cache, the cache including policies and configurations of one or more organizations, wherein the managing includes maintaining valid User Performance Management (UPM) configurations from each of the one or more organizations;
receive a policy request from a connector application running on a user device of the plurality of user devices;
provide any of policy and configuration to the connector application utilizing the version numbers to optimize updates to the policy and configuration via a RESTful endpoint, wherein policy and configuration updates are provided to the connector application of the user device from the cache based on an associated organization only when there is a change in policy for the user device;
cache the any of policy and configuration for each device of the plurality of user devices; and
receive metrics based on measurements at the plurality of user devices according to corresponding policy and configuration, via a RESTful endpoint.

9. The TPG node of claim 8 , wherein the instructions that, when executed, cause the one or more processors to:
perform any of (i) send a code to the connector application indicating that no new policy is available, and (ii) obtain the any of policy and configuration updates for a specific organization associate with the user device from a central authority associated with the cloud-based system when there is a new policy for the user device based on the version numbers.

10. The TPG node of claim 8 , wherein the instructions that, when executed, cause the one or more processors to
publish the received metrics to a cloud metric store associated with the cloud-based system.

11. The TPG node of claim 8 , wherein the instructions that, when executed, cause the one or more processors to
aggregate received metrics from some or all of the plurality of devices; and
publish the aggregated received metrics to a data store.

12. The TPG node of claim 8 , wherein the instructions that, when executed, cause the one or more processors to
add geo location information to the received metrics based on location identifiable parameters.

13. The TPG node of claim 8 , wherein the cloud-based system includes the TPG node and one or more additional TPG nodes, each TPG node is stateless with respect to one another.

14. The TPG node of claim 8 , wherein the received metrics are associated with user experience monitoring.

15. A non-transitory computer-readable storage medium having computer-readable code stored thereon for programming a node to perform steps of:
connecting to and authenticating a plurality of user devices;
utilizing a plurality of RESTful (Representational State Transfer web service) endpoints to communicate with a connector application running on each of the plurality of user devices;
managing version numbers of the plurality of user devices;
managing a cache, the cache including policies and configurations of one or more organizations, wherein the managing includes maintaining valid User Performance Management (UPM) configurations from each of the one or more organizations;
receiving a policy request from a connector application running on a user device of the plurality of user devices;
providing any of policy and configuration to the connector application utilizing the version numbers to optimize updates to the policy and configuration via a RESTful endpoint, wherein policy and configuration updates are provided to the connector application of the user device from the cache based on an associated organization only when there is a change in policy for the user device;
caching the any of policy and configuration for each device of the plurality of user devices; and
receiving metrics based on measurements at the plurality of user devices according to corresponding policy and configuration, via a RESTful endpoint.

16. The non-transitory computer-readable storage medium of claim 15 , wherein the steps further include, based on the policy request and contents of the cache:
performing any of (i) sending a code to the connector application indicating that no new policy is available, and (ii) obtaining the any of policy and configuration updates for a specific organization associate with the user device from a central authority associated with the cloud-based system when there is a new policy for the user device based on the version numbers.

17. The non-transitory computer-readable storag

Assignees

• Zscaler Inc

Inventors

• Pangeni Sushil
• Devarajan Srikanth
• Singh Ajit
• Zheng Chenglong
• Kamath Sandeep
• Wang Di

Classifications

• H04L41/0894 Primary

  Policy-based network configuration management · CPC title

• H04L41/0893 Primary

  Assignment of logical groups to network elements · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L67/51

  Discovery or management thereof, e.g. service location protocol [SLP] or web services · CPC title