Dynamic throttling of scan requests for multiple scanners a cluster of nodes

Patent metadata

Field	Value
Publication number	US-2016294853-A1
Application number	US-201514728564-A
Country	US
Kind code	A1
Filing date	Jun 2, 2015
Priority date	Mar 30, 2015
Publication date	Oct 6, 2016
Grant date	—

Abstract

Techniques for dynamic throttling of scan requests for multiple scanners in a cluster of nodes are described. An apparatus may comprise a dynamic throttling service component for executing the dynamic throttling of scan requests for the multiple scanners in the cluster of nodes. The dynamic throttling service component operative to estimate, by the scanner proxy, a resource limit count value representative of resource capacity for servicing scan requests for each one of the multiple scanners in the cluster of nodes; detect a first scan request exceeds the resource limit count value for a first scanner; dynamically throttle each subsequent scan request for the first scanner in response to the first scan request exceeding the resource limit count value; and revise the resource limit count value, by the scanner proxy, for the first scanner.

First claim

1 . A computer-implemented method, comprising:
estimating a resource limit count value representative of a resource capacity for servicing scan requests for each one of multiple scanners in a cluster of nodes; detecting a first scan request exceeds the resource limit count value for a first scanner; dynamically throttling each subsequent scan request for the first scanner in response to the first scan request exceeding the resource limit count value; and revising the resource limit count value for the first scanner.

2 . The method of claim 1 , comprising revising the resource limit count value for each one of the multiple scanners in the cluster of nodes at a predetermined time period to increase or decrease a current number of outstanding scan requests.

3 . The method of claim 1 , comprising:
decreasing the resource limit count value for the first scanner when the first scan request exceeds the resource limit count value; and increasing the resource limit count value for the first scanner following a predetermined time period in which multiple scan requests do not exceed the resource limit count value.

4 . The method of claim 1 , comprising setting the resource limit count value for the first scanner equal to the current number of outstanding scan requests in response to the first scan request exceeding the resource limit count value.

5 . The method of claim 1 , comprising:
reserving the first scanner for the first scan request; applying the dynamic throttling in response to failing to reserve the first scanner for the first scan request; and forwarding the first scan request to a second scanner.

6 . The method of claim 1 , comprising issuing a performance status for the first scanner.

7 . The method of claim 1 , comprising:
maintaining the current number of outstanding scan requests for the first scanner; increasing the current number of outstanding scan requests for the first scanner in response to increasing the resource limit count value; or decreasing the current number of outstanding scan requests for the first scanner in response to decreasing the resource limit count value.

8 . An apparatus, comprising:
a processor circuit; and a dynamic throttling service component for execution by the processor circuit to dynamically throttle scan requests for multiple scanners in a cluster of nodes, the dynamic throttling service component to estimate a resource limit count value representative of resource capacity to service scan requests for each one of the multiple scanners in the cluster of nodes, detect when a scan request exceeds the resource limit count value for a scanner, dynamically throttle each subsequent scan request for the scanner in response to the scan request that exceeds the resource limit count value, and revise the resource limit count value for the scanner.

9 . The apparatus of claim 8 , the dynamic throttling service component to revise the resource limit count value for each one of the multiple scanners in the cluster of nodes at a predetermined time period to increase or decrease a current number of outstanding scan requests.

10 . The apparatus of claim 8 , the dynamic throttling service component operative to:
decrease the resource limit count value for the scanner in response to the scan request exceeding the resource limit count value; or increase the resource limit count value for the scanner following a predetermined time period in which multiple scan requests do not exceed the resource limit count value.

11 . The apparatus of claim 8 , the dynamic throttling service component operative to set the resource limit count value for the scanner equal to the current number of outstanding scan requests in response to the scan request exceeding the resource limit count value.

12 . The apparatus of claim 8 , the dynamic throttling service component operative to:
reserve the scanner for the scan request; apply the dynamic throttling in response to failing to reserve the scanner for the scan request; and forward the scan request to another scanner.

13 . The apparatus of claim 8 , the dynamic throttling service component operative to issue a performance status for the scanner.

14 . The apparatus of claim 8 , the dynamic throttling service component operative to:
maintain the current number of outstanding scan requests for the scanner; increase the current number of outstanding scan requests for the scanner in response to increasing the resource limit count value; or decrease the current number of outstanding scan requests for the scanner in response to decreasing the resource limit count value.

15 . At least one non-transitory computer-readable storage medium comprising instructions that, when executed, cause a system to:
estimate a resource limit count value representative of a resource capacity for servicing scan requests for each one of multiple scanners in a cluster of nodes; detect a first scan request exceeds the resource limit count value for a first scanner; dynamically throttle each subsequent scan request for the first scanner in response to the first scan request exceeding the resource limit count value; and revise the resource limit count value for the first scanner.

16 . The computer-readable storage medium of claim 15 , comprising further instructions that, when executed, cause a system to revise the resource limit count value for each one of the multiple scanners in the cluster of nodes at a predetermined time period for one of increasing or decreasing a current number of outstanding scan requests.

17 . The computer-readable storage medium of claim 15 , comprising further instructions that, when executed, cause a system to:
decrease the resource limit count value for the first scanner in response to the first scan request exceeding the resource limit count value; and increase the resource limit count value for the first scanner following a predetermined time period in which multiple scan requests do not exceed the resource limit count value.

18 . The computer-readable storage medium of claim 15 , comprising further instructions that, when executed, cause a system to set the resource limit count value for the first scanner equal to the current number of outstanding scan requests in response to the first scan request exceeding the resource limit count value.

19 . The computer-readable storage medium of claim 15 , comprising further instructions that, when executed, cause a system to:
reserve the first scanner for the first scan request; issue a performance status for the first scanner in response to a scanner proxy requesting a reservation of the first scanner for the first scan request; apply the dynamic throttling in response to failing to reserve the first scanner for the first scan request; and forward the first scan request to a second scanner.

20 . The computer-readable storage medium of claim 15 , comprising further instructions that, when executed, cause a system to:
maintain the current number of outstanding scan requests for the first scanner; increase the current number of outstanding scan requests for the first scanner in response to increasing the resource limit count value; and decrease the current number of outstanding scan requests for the first scanner in response to decreasing the resource limit count value.

Assignees

• Netapp Inc

Inventors

• Murugesan Kumar
• Singh Mankawal Deep
• Muhlestein Mark

Classifications

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1458 Primary

  Denial of Service · CPC title

• H04L63/145

  the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms · CPC title

• H04L63/1416 Primary

  Event detection, e.g. attack signature detection · CPC title