Services within reverse proxy servers

Patent metadata

Field	Value
Publication number	US-9648043-B2
Application number	US-201514696432-A
Country	US
Kind code	B2
Filing date	Apr 25, 2015
Priority date	Sep 24, 2014
Publication date	May 9, 2017
Grant date	May 9, 2017

Abstract

Embodiments of the invention provide techniques for processing messages transmitted between computer networks. Messages, such as requests from client devices for web services and other web content may be transmitted between multiple computer networks. Intermediary devices or applications such as proxy servers may receive, process, and transmit the messages between the communication endpoints. In some embodiments, a reverse proxy server may be configured to dynamically generate Representational State Transfer (REST) services and REST resources within the reverse proxy server. The REST services and REST resources within the reverse proxy server may handle incoming requests from client devices and invoke backend web services, thereby allowing design abstraction and/or enforcement of various security policies on the reverse proxy server.

First claim

What is claimed is:

1. A method of transmitting web service requests between computer networks, the method comprising:
receiving, at a proxy server in communication with an internal computer network, a web service request from a client device in an external computer network separate from the internal computer network;
identifying a first resource within the web service request;
determining whether the first resource is exposed by a first Representational State Transfer (REST) web service within the proxy server;
in response to determining that the first resource is exposed by the first REST web service, invoking the first REST web service within the proxy server;
during execution of the first REST web service within the proxy server, invoking a second web service within a computer server in the internal computer network;
accessing a Web Application Description Language (WADL) file describing a set of resources provided by the second web service within the computer server in the internal computer network; and
generating one or more resources in the first REST web service within the proxy server, using the description in the WADL file of the set of resources provided by the second web service, wherein generating the resources in the first REST web service within the proxy server comprises:
modifying one or more resource descriptions within the WADL file;
creating one or more REST resources based on the modified resource descriptions; and
deploying each of the REST resources in the first REST web service within the proxy server.

2. The method of claim 1 , wherein invoking the first REST web service within the proxy server comprises:
determining that the first resource exposed by the first REST web service does not exist within the proxy server; and
generating the first resource within the proxy server, wherein the first resource is generated after the web service request is received from the client device.

3. The method of claim 1 , wherein the second web service is a REST web service within the computer server in the internal computer network.

4. The method of claim 3 , wherein the first REST web service within the proxy server exposes a plurality of resources, including at least one resource configured to invoke the second REST web service, and including at least one resource configured to invoke a third REST web service exposed by a different computer server in the internal computer network.

5. The method of claim 3 , wherein the second REST web service exposes a plurality of resources, and wherein the first REST web service within the proxy server exposes a subset of the plurality of resources exposed by the second REST web service.

6. The method of claim 1 , wherein the second web service is a Simple Object Access protocol (SOAP) web service within the computer server in the internal computer network.

7. The method of claim 1 , further comprising:
determining a current point in a predetermined processing flow for the web service request within the proxy server;
retrieving one or more security policies, based on the determined current point in the predetermined processing flow for the web service request; and
processing the web service request in accordance with the security policies, wherein the web service request is processed before invoking the second web service exposed by the computer server in the internal computer network.

8. A system comprising:
a processing unit comprising one or more processors; and
memory coupled with and readable by the processing unit and storing therein a set of instructions which, when executed by the processing unit, causes the processing unit to:
receive a web service request from a client device in an external computer network, wherein the system is configured to operate within a subnetwork of an internal computer network separate from the external computer network;
identify a first resource within the web service request;
determine whether the first resource is exposed by a first Representational State Transfer (REST) web service within the system;
invoke the first REST web service within the system, in response to determining that the first resource is exposed by the first REST web service;
during execution of the first REST web service within the system, invoke a second web service within a computer server in the internal computer network;
access a Web Application Description Language (WADL) file describing a set of resources provided by the second web service within the computer server in the internal computer network; and
generate one or more resources in the first REST web service within the system, using the description in the WADL file of the set of resources provided by the second web service, wherein generating the resources in the first REST web service within the system comprises:
modifying one or more resource descriptions within the WADL file;
creating one or more REST resources based on the modified resource descriptions; and
deploying each of the REST resources in the first REST web service within the system.

9. The system of claim 8 , wherein invoking the first REST web service within the system comprises:
determining that the first resource exposed by the first REST web service does not exist within the memory of the system; and
generating the first resource within the memory of the system, wherein the first resource is generated after the web service request is received from the client device.

10. The system of claim 8 , wherein the second web service is a REST web service within the computer server in the internal computer network.

11. The system of claim 10 , wherein the first REST web service within the system exposes a plurality of resources, including at least one resource configured to invoke the second REST web service, and including at least one resource configured to invoke a third REST web service exposed by a different computer server in the internal computer network.

12. The system of claim 10 , wherein the second REST web service exposes a plurality of resources, and wherein the first REST web service within the system exposes a subset of the plurality of resources exposed by the second REST web service.

13. A method of transmitting web service requests between computer networks, the method comprising:
receiving, at a proxy server in communication with an internal computer network, a web service request from a client device in an external computer network separate from the internal computer network;
identifying a first resource within the web service request;
determining whether the first resource is exposed by a first Representational State Transfer (REST) web service within the proxy server;
in response to determining that the first resource is exposed by the first REST web service, invoking the first REST web service within the proxy server; and
during execution of the first REST web service within the proxy server, invoking a second web service within a computer server in the internal computer network, wherein the second web service is a REST web service within the computer server in the internal computer network,
wherein the first REST web service within the proxy server exposes a plurality of resources, including at least one resource configured to invoke the second REST web service, and including at least one resource configured to invoke a third REST web service exposed by a different computer server in the internal computer network.

14. The method of claim 13 , wherein invoking the first REST web service within the proxy server comprises:
determining that the first resource exposed by the first REST web service doe

Assignees

• Oracle Int Corp

Inventors

• Handa Nitin
• Yamuna Prakash

Classifications

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L41/06

  Management of faults, events, alarms or notifications · CPC title

• G06F16/972

  Access to data in other repository systems, e.g. legacy data or dynamic Web page generation · CPC title

• H04L63/0209

  Architectural arrangements, e.g. perimeter networks or demilitarized zones · CPC title

• H04L63/0281

  Proxies · CPC title