Load balancer metadata forwarding on secure connections
AssigneeAmazon Technologies, Inc.
InventorNima Sharifi Mehr
Life of this patent
Estimating the term…
Abstract
Network devices, such as load balancers may be configured to forward client metadata to back-end nodes using defined fields of a security protocol. For example, client metadata may be inserted into an extension field or certificate defined by a security protocol that is used for a secure connection between the load balancer and the back-end node. In some instances, a source IP address based on a received request may be inserted into the extension field or certificate defined by the security protocol before the request is forwarded to the back-end node. The back-end node may extract the client metadata and use the client metadata for any of a number of processes (e.g., billing, tracking, security, logging, etc.).
Claims20
A system, comprising:
- a plurality of load balancers;
- and
- one or more back-end processes coupled to the load balancers, wherein individual ones of the one or more back-end processes are configured to:
- receive, over a connection, a health check ping from one of the load balancers;
- evaluate a system resource capacity of the back-end process;
- determine, based on said evaluate, whether to simulate unavailability of the back-end process, wherein simulate unavailability comprises transmitting a negative response to a health check ping when the back-end process is available;
- for a determination to simulate unavailability, transmit a negative response to the health check ping to simulate unavailability of the back-end process when the back-end process is available;
- and
- for a determination to remain available, transmit, over the connection, a positive response to the load balancer in response to the health check ping.
A process, comprising:
- performing, by a back-end system comprising one or more processors:
- receiving, by the back-end system over a connection, a health check ping from a load balancer;
- evaluating, by the back-end system, a system resource capacity of the back-end system;
- determining, by the back-end system and based on said evaluating, whether to simulate unavailability of the back-end system, wherein simulate unavailability comprises transmitting a negative response to a health check ping when the back-end system is available;
- and
- for a determination to simulate unavailability, transmitting a negative response to the health check ping to simulate unavailability of the back-end system when the back-end system is available.
One or more non-transitory computer readable media storing program instructions that are executed on or across one or more processors to implement a back-end system configured to perform:
- evaluating, by the back-end system and based on receipt of a health check ping over a connection from a load balancer, a system resource capacity of the back-end system;
- determining, by the back-end system and based on said evaluating, whether to simulate unavailability of the back-end system, wherein simulate unavailability comprises transmitting a negative response to a health check ping when the back-end system is available;
- and
- for a determination to simulate unavailability, indicating, to the load balancer, a negative response to the health check ping to simulate unavailability of the back-end system when the back-end system is available.
Dependencies are inferred from the claim text.