Leveraging microservice containers to provide tenant isolation in a multi-tenant api gateway
US-2019102206-A1 · Apr 4, 2019 · US
US12169732B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-12169732-B2 |
| Application number | US-202217673774-A |
| Country | US |
| Kind code | B2 |
| Filing date | Feb 16, 2022 |
| Priority date | Feb 17, 2021 |
| Publication date | Dec 17, 2024 |
| Grant date | Dec 17, 2024 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
One example process may include modifying a status of a container after a communication session associated with the container has ended, receiving a token from a client device to establish a communication session with a virtual machine, assigning the client device to the container, updating a container state file to include the token, a file version and a client device identifier, and responsive to assigning the client device, initiating one or more container processes with the container and maintaining one or more container processes already operating in an active status with the container prior to the assignment.
Opening claim text (preview).
What is claimed is: 1. A method comprising determining during an audit operation a status of a container has changed from an actively assigned session to available based on an ended session being detected, wherein the container is identified as being in a dormant state and having a plurality of previously active session dependent processes which are currently cancelled and one or more active parent processes; modifying the status of the container and maintaining the one or more active parent processes in an active status of the container, wherein the modifying the status of the container comprises updating a container state file to include a session identifier identifying the available operational status; receiving a token from a client device to establish a communication session with a virtual machine; assigning the client device to the container; updating the container state file to include a client device identifier; and responsive to assigning the client device, initiating one or more new container processes with the container and maintaining the one or more active parent processes. 2. The method of claim 1 , comprising responsive to modifying a status of the container, removing a previously assigned file system, the log file and one or more processes which were operating with the container. 3. The method of claim 1 , comprising responsive to assigning the client device to the container, loading a file system associated with an application of the client device. 4. The method of claim 1 , wherein the maintaining active parent processes already operating in an active status comprises maintaining a firewall process, a port range of assigned ports assigned to the container, and a virtual network adapter. 5. The method of claim 1 , wherein modifying the status of the container after the communication session has ended comprises removing a TCP proxy process and a DNS server process from the container. 6. The method of claim 5 , wherein the initiating one or more container processes comprises initiating a new TCP proxy process and a new DNS server process with the container. 7. An apparatus comprising: a processor configured to determine during an audit operation an operational status of a container has changed from an actively assigned session to available based on an ended session being detected, wherein the container is identified as being in a dormant state and having a plurality of previously active session dependent processes which are currently cancelled and one or more active parent processes; modify the status of the container and maintain the one or more active parent processes in an active status of the container, wherein the modifying the status of the container comprises updating a container state file to include a session identifier identifying the available operational status; and a receiver configured to receive a token from a client device to establish a communication session with a virtual machine; wherein the processor is further configured to assign the client device to the container; update the container state file to include a client device identifier; and responsive to the client device being assigned, initiate one or more new container processes with the container and maintain the one or more active parent processes. 8. The apparatus of claim 7 , wherein the processor is further configured to responsive to a status of the container being modified, remove a previously assigned file system, the log file and one or more processes which were operating with the container. 9. The apparatus of claim 7 , wherein the processor is further configured to responsive to the client device being assigned to the container, load a file system associated with an application of the client device. 10. The apparatus of claim 7 , wherein the processor is further configured to maintain the active parent processes already operating in an active status by being further configured to maintain a firewall process, a port range of assigned ports assigned to the container, and a virtual network adapter. 11. The apparatus of claim 7 , wherein the status of the container is modified after the communication session has ended comprises removing a TCP proxy process and a DNS server process from the container. 12. The apparatus of claim 11 , wherein the one or more container processes are initiated by the processor being further configured to initiate a new TCP proxy process and a new DNS server process with the container. 13. A non-transitory computer readable medium configured to store instructions that when executed causes a processor to perform: determining during an audit operation a status of a container has changed from an actively assigned session to available based on an ended session being detected, wherein the container is identified as being in a dormant state and having a plurality of previously active session dependent processes which are currently cancelled and one or more active parent processes; modifying the status of the container and maintaining the one or more active parent processes in an active status of the container, wherein the modifying the status of the container comprises updating a container state file to include a session identifier identifying the available operational status; receiving a token from a client device to establish a communication session with a virtual machine; assigning the client device to the container; updating the container state file to include a client device identifier; and responsive to assigning the client device, initiating one or more new container processes with the container and maintaining the one or more active parent processes. 14. The non-transitory computer readable medium of claim 13 , wherein the processor is further configured to perform: responsive to modifying a status of the container, removing a previously assigned file system, the log file and one or more processes which were operating with the container. 15. The non-transitory computer readable medium of claim 13 , wherein the processor is further configured to perform: responsive to assigning the client device to the container, loading a file system associated with an application of the client device. 16. The non-transitory computer readable medium of claim 13 , wherein the maintaining the active parent processes already operating in an active status comprises maintaining a firewall process, a port range of assigned ports assigned to the container, and a virtual network adapter. 17. The non-transitory computer readable medium of claim 13 , wherein modifying the status of the container after the communication session has ended comprises removing a TCP proxy process and a DNS server process from the container.
using domain name system [DNS] · CPC title
Network integration; Enabling network access in virtual machine instances · CPC title
In-band adaptation of TCP data exchange; In-band control procedures · CPC title
I/O management, e.g. providing access to device drivers or storage · CPC title
Filtering by address, protocol, port number or service, e.g. IP-address or URL · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.