Hybrid approach for performance enhancing proxies

Patent metadata

Field	Value
Publication number	US-9397939-B2
Application number	US-201414313354-A
Country	US
Kind code	B2
Filing date	Jun 24, 2014
Priority date	Jun 24, 2014
Publication date	Jul 19, 2016
Grant date	Jul 19, 2016

Abstract

There are provided a transparent performance enhancing proxy, a method for operating a transparent performance enhancing proxy between a source device and a destination device, and corresponding computer program product. The method includes preserving, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device. The method further includes during a transmission control protocol connection setup phase for the packet, preserving transmission control protocol connection semantics. The method also includes during a transmission control protocol data transfer phase for the packet, running a transmission control protocol by masquerading as the source device to the destination device and masquerading as the destination device to the source device to transmit the packet to the destination device with the preserved packet header information.

First claim

What is claimed is:

1. A method for operating a transparent performance enhancing proxy between a source device and a destination device, comprising:
preserving, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device;
during a transmission control protocol connection setup phase for the packet, preserving transmission control protocol connection semantics;
upon establishment of a connection between the source device and the destination device during the transmission control protocol connection setup phase, locally terminating the connection at the transparent performance enhancing proxy and creating a connection from the source device to the transparent performance enhancing proxy and a connection from the transparent performance enhancing proxy to the source device; and
during a transmission control protocol data transfer phase for the packet, running a transmission control protocol by masquerading as the source device to the destination device and masquerading as the destination device to the source device to transmit the packet to the destination device with the preserved packet header information.

2. The method of claim 1 , wherein the packet header information that is preserved without translation comprises, at least one of:
for transmission control protocol communication of the packet, at least one of a transmission control protocol port number, a transmission control protocol sequence number, and a transmission control protocol header option;
for Internet protocol communication of the packet, at least one of an Internet Protocol address, an Internet Protocol hop limit, an Internet Protocol Time To Live, an Internet Protocol Type of Service, and an Explicit Congestion Notification; and
for media access control communication of the packet, at least one of a media access control address and a virtual local area network tag.

3. The method of claim 1 , wherein the packet header information that is preserved without translation comprises all information specified in all mandatory fields of the header.

4. The method of claim 3 , wherein the packet header information that is preserved without translation further comprises all information specified in at least some mandatory options fields of the header.

5. The method of claim 1 , wherein the transmission control protocol connection semantics are preserved for the connection setup phase by waiting for a Synchronize Acknowledge to return from the destination device and preventing termination of a connection between the source device and the destination device until both the source device and the destination device have completed their respective connection establishment sequences for the connection.

6. The method of claim 1 , further comprising preserving transmission control protocol connection semantics for a connection termination phase for the packet by closing a connection between the source device and the transparent performance enhancing proxy, closing a connection between the transparent performance enhancing proxy and the destination device, and releasing all allocated resources for the connections.

7. The method of claim 1 , further comprising:
responsive to receiving the packet from the source device, creating a copy of the packet, caching the copy of the packet, and transmitting the copy of the packet to the destination device;
responsive to receiving an acknowledgement for the packet from the source device, destroying the copy of the packet that has been cached; and
responsive to a detection of packet loss relating to the packet, retransmitting the copy of the packet that has been cached.

8. The method of claim 1 , further comprising preserving, for the connection from the source device to the transparent performance enhancing proxy and the connection from the transparent performance enhancing proxy to the source device, any transmission control protocol options previously negotiated between the source device and the destination device for the connection there between.

9. The method of claim 8 , wherein the transmission control protocol options comprise at least one of path Maximum Transmission Unit, Selective Acknowledgement, and Explicit Congestion Notification.

10. A computer program product for operating a transparent performance enhancing proxy, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor comprised in the transparent performance enhancing proxy to cause the transparent performance enhancing proxy to:
preserve, without translation, packet header information of a header for a packet received from the source device to be forwarded to the destination device;
during a transmission control protocol connection setup phase for the packet, preserve transmission control protocol connection semantics;
upon establishment of a connection between the source device and the destination device during the transmission control protocol connection setup phase, locally terminating the connection at the transparent performance enhancing proxy and creating a connection from the source device to the transparent performance enhancing proxy and a connection from the transparent performance enhancing proxy to the source device; and
during a transmission control protocol data transfer phase for the packet, running a transmission control protocol by masquerading as the source device to the destination device and masquerading as the destination device to the source device to transmit the packet to the destination device with the preserved packet header information.

11. The computer program product of claim 10 , wherein the packet header information that is preserved without translation comprises, at least one of:
for transmission control protocol communication of the packet, at least one of a transmission control protocol port number, a transmission control protocol sequence number, and a transmission control protocol header option;
for Internet protocol communication of the packet, at least one of an Internet Protocol address, an Internet Protocol hop limit, an Internet Protocol Time To Live, an Internet Protocol Type of Service, and an Explicit Congestion Notification; and
for media access control communication of the packet, at least one of a media access control address and a virtual local area network tag.

12. The computer program product of claim 10 , wherein the transmission control protocol connection semantics are preserved for the connection setup phase by waiting for a Synchronize Acknowledge to return from the destination device and preventing termination of a connection between the source device and the destination device until both the source device and the destination device have completed their respective connection establishment sequences for the connection.

13. The computer program product of claim 10 , further comprising preserving transmission control protocol connection semantics for a connection termination phase for the packet by closing a connection between the source device and the transparent performance enhancing proxy, closing a connection between the transparent performance enhancing proxy and the destination device, and releasing all allocated resources for the connections.

14. The computer program product of claim 10 , further comprising preserving, for the connection from the source device to the proxy and the connection from the proxy to source device, any transmission control protocol options previously negotiated between the sou

Assignees

• IBM

Inventors

• Kashyap Vivek
• Kravetz Michael J
• Ma Xiuling
• Nahum Erich M

Classifications

• H04L45/74 Primary

  Address processing for routing · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L69/161 Primary

  Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields · CPC title

• H04L43/0829

  Packet loss · CPC title

• H04L69/163

  In-band adaptation of TCP data exchange; In-band control procedures · CPC title