US 2006/0137002 A1 · System, method and program product to route message packets

Abstract

A system, method and computer program for routing a response message packet. The response message packet is a response to a request message packet which traveled along an outbound path from a source computer to a destination computer. The outbound path comprises a first firewall for the source computer and a first router coupled to the first firewall. In response to the first firewall receiving the request message packet, the firewall broadcasts to a first plurality of peer firewall(s) and/or router(s) a session of the request message packet and an identity of the first firewall. In response, the first plurality of peer firewall(s) and/or router(s) records the session of the request message packet and that the first firewall was a first hop in the outbound path. The first firewall forwards the request message packet to the first router. In response, the first router broadcasts to a second plurality of peer firewall(s) and/or router(s) a session of the message packet and an identity of the first router. In response, the second plurality of peer firewall(s) and/or router(s) records the session of the request message packet and that the first router was a second hop in the outbound path. In response to a second router of the second plurality of peer firewall(s) and/or router(s) receiving the response message packet, the second router (a) compares a session of the response message packet indicated by the response message packet to the second router's record of the session of the request message packet, (b) determines from the record that the first firewall or the first router was in the outbound path and (c) forwards the response message packet to the first firewall or the first router. The second router was not in the outbound path.

Claims18

Dependent claims

A method for routing a response message packet, said response message packet being a response to a request message packet which traveled along an outbound path from a source computer to a destination computer, said outbound path comprising a first firewall for said source computer and a first router coupled to said first firewall, said method comprising:

in response to said first firewall receiving said request message packet, said firewall broadcasting to a first plurality of peer firewall(s) and/or router(s) a session of said request message packet and an identity of said first firewall, and in response, said first plurality of peer firewall(s) and/or router(s) recording the session of said request message packet and that said first firewall was a first hop in said outbound path;
said first firewall forwarding said request message packet to said first router, and in response, said first router broadcasting to a second plurality of peer firewall(s) and/or router(s) a session of said message packet and an identity of said first router, and in response, said second plurality of peer firewall(s) and/or router(s) recording the session of said request message packet and that said first router was a second hop in said outbound path;
and
in response to a second router of said second plurality of peer firewall(s) and/or router(s) receiving said response message packet, said second router comparing a session of said response message packet indicated by said response message packet to the second router's record of the session of said request message packet, determining from said record that said first firewall or said first router was in said outbound path and forwarding said response message packet to said first firewall or said first router, said second router not being in said outbound path.

1 more element

A system for routing a response message packet, said response message packet being a response to a request message packet which traveled along an outbound path from a source computer to a destination computer, said outbound path comprising a first firewall for said source computer and a first router coupled to said first firewall, said system comprising:

said first firewall including means, responsive to said first firewall receiving said request message packet, for broadcasting to a first plurality of peer firewall(s) and/or router(s) a session of said request message packet and an identity of said first firewall, and in response, said first plurality of peer firewall(s) and/or router(s) including means for recording the session of said request message packet and that said first firewall was a first hop in said outbound path;
said first firewall including means for forwarding said request message packet to said first router, and in response, said first router including means for broadcasting to a second plurality of peer firewall(s) and/or router(s) a session of said message packet and an identity of said first router, and in response, said second plurality of peer firewall(s) and/or router(s) including means for recording the session of said request message packet and that said first router was a second hop in said outbound path;
and
in response to a second router of said second plurality of peer firewall(s) and/or router(s) receiving said response message packet, said second router including means for comparing a session of said response message packet indicated by said response message packet to the second router's record of the session of said request message packet, determining from said record that said first firewall or said first router was in said outbound path and forwarding said response message packet to said first firewall or said first router, said second router not being in said outbound path.

1 more element

A computer program product for routing a response message packet, said response message packet being a response to a request message packet which traveled along an outbound path from a source computer to a destination computer, said outbound path comprising a first firewall for said source computer and a first router coupled to said first firewall, said computer program product comprising:

a computer readable medium;
first program instructions for execution in said first firewall, responsive to said first firewall receiving said request message packet, to broadcast to a first plurality of peer firewall(s) and/or router(s) a session of said request message packet and an identity of said first firewall, and in response, second program instructions for execution in said first plurality of peer firewall(s) and/or router(s) to record the session of said request message packet and that said first firewall was a first hop in said outbound path;
third program instructions for execution in said first firewall to forward said request message packet to said first router, and in response, fourth program instructions for execution in said first router to broadcast to a second plurality of peer firewall(s) and/or router(s) a session of said message packet and an identity of said first router, and in response, fifth program instructions for execution in said second plurality of peer firewall(s) and/or router(s) to record the session of said request message packet and that said first router was a second hop in said outbound path;
and
in response to a second router of said second plurality of peer firewall(s) and/or router(s) receiving said response message packet, sixth program instructions for execution in said second router to compare a session of said response message packet indicated by said response message packet to the second router's record of the session of said request message packet, determine from said record that said first firewall or said first router was in said outbound path and forward said response message packet to said first firewall or said first router, said second router not being in said outbound path;
and wherein
said first, second, third, fourth, fifth and sixth program instructions are recorded on said medium.

4 more elements

Dependencies are inferred from the claim text.

System, method and program product to route message packets

Life of this patent

System, method and program product to route message packets

Life of this patent

Abstract

Claims18