US 2015/0089582 A1Published application

Cloud Based Firewall System And Service

AssigneeAkamai Technologies, Inc.

InventorsJohn A. Dilley, Prasanna Laghate, John Summers, Thomas Devanneaux

Life of this patent

Estimating the term…

Loading patent…

Abstract

A cloud-based firewall system and service is provided to protect customer sites from attacks, leakage of confidential information, and other security threats. In various embodiments, such a firewall system and service can be implemented in conjunction with a content delivery network (CDN) having a plurality of distributed content servers. The CDN servers receive requests for content identified by the customer for delivery via the CDN. The CDN servers include firewalls that examine those requests and take action against security threats, so as to prevent them from reaching the customer site. The CDN provider implements the firewall system as a managed firewall service, with the operation of the firewalls for given customer content being defined by that customer, independently of other customers. In some embodiments, a customer may define different firewall configurations for different categories of that customer's content identified for delivery via the CDN.

Claims23

Dependent claims

A method of content delivery in a content delivery network (CDN) operated by a content delivery network service provider (CDNSP) on behalf of a plurality of participating content providers, wherein the plurality of participating content providers identify content to be delivered over the CDN, the method comprising:

receiving one or more first firewall settings from a first participating content provider that specify how a firewall is to operate with respect to requests for content identified by the first participating content provider for delivery over the CDN;
receiving one or more second firewall settings from a second participating content provider that specify how a firewall is to operate with respect to requests for content identified by the second participating content provider for delivery over the CDN;
communicating the one or more first firewall settings and the one or more second firewall settings to the plurality of content servers in the CDN;
at one of the plurality of content servers in the CDN, receiving a first request for content identified by the participating content provider for delivery over the CDN, and evaluating the first request using a firewall configured with the one or more first firewall settings;
at one of the plurality of content servers in the CDN, receiving a second request for content identified by the second participating content provider for delivery over the CDN, and evaluating the second request using a firewall configured with the one or more second firewall settings.

2 more elements

A content delivery network (CDN) operated by a content delivery network service provider (CDNSP) on behalf of a plurality of participating content providers, wherein the plurality of participating content providers identify content to be delivered over the CDN, the CDN comprising one or more content servers having a processor and a memory storing instructions that, when executed by the processor, cause the one or more content servers to execute the following steps:

receiving one or more first firewall settings that specify how a firewall is to operate with respect to requests for content identified by a first participating content provider for delivery over the CDN;
receiving one or more second firewall settings that specify how a firewall is to operate with respect to requests for content identified by a second participating content provider for delivery over the CDN;
at one of the plurality of content servers in the CDN, receiving a first request for content identified by the participating content provider for delivery over the CDN, and evaluating the first request using a firewall configured with the one or more first firewall settings;
at one of the plurality of content servers in the CDN, receiving a second request for content identified by the second participating content provider for delivery over the CDN, and evaluating the second request using a firewall configured with the one or more second firewall settings.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 14/555,428Filed 26 Nov 2014
Priority: 12 Dec 2009
Published: 26 Mar 2015
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/0263
Filtering policies: rule management
H04L 63/0218
Architectural arrangements, e.g. perimeter networks or demilitarized zones: distributed architectures, e.g. distributed firewalls
H04L 63/0227
For separating internal from external traffic, e.g. firewalls: filtering policies
H04L 63/16
Network architectures or network communication protocols for network security: implementing security features at a particular protocol layer

Family

Application61/285,958Us provisional application · filed 12 Dec 2009
Application12/965,188Continuation · filed 10 Dec 2010
Application13/896,995Continuation · filed 17 May 2013
Application14/555,428Continuation
US 2011/0225647 A1Published application
US 2013/0269023 A1Published application
US 8,458,769 B2Related patent
US 9,009,781 B2Related patent
US 2015/0089582 A1This patent

From the US filing history. Foreign family members aren’t listed.