Scalable content delivery network request handling mechanism to support a request processing layer

A system, comprising:

• a first server managed by a content delivery network (CDN) service provider and comprising circuitry forming one or more processors coupled to memory holding non-transitory computer-program instructions to be executed by the one or more processors to cause the first server to:
• receive a first request from a client device over a network interface, the first request comprising an application programming interface (API) request;
• in response to the first request, determine a configuration file stored at the first server to apply for handling the request;
• identify, within the configuration file, a control that indicates how to handle the first request from within a set of controls stored at the first server in the configuration file;
• wherein the control has a reference to an API endpoint policy that controls, at least, client authentication;
• extract an identifier from the first request received from the client;
• in response to the identification of the control with the reference to the API endpoint policy, send a second request that includes the extracted identifier to a remote host for the API endpoint policy;
• receive the API endpoint policy from the remote host in response to the second request, the API endpoint policy comprising any of data and a routine, for authenticating any of the client device, client user, and client application;
• apply the control to the request at least by applying the API endpoint policy to determine whether any of the client device, client user, and client application, is authenticated;
• based at least in part on applying the control and the API endpoint policy and successfully authenticating any of the client device, client user, and client application, send at least a portion of the first request to a second server, the second server being an API origin for the API;
• the remote host comprising circuitry forming one or more processors coupled to memory holding non-transitory computer-program instructions to be executed by the one or more processors to cause the remote host to:
• receive the second request from the first server, with the extracted identifier;
• based at least in part on the extracted identifier, select the API endpoint policy from amongst a plurality of API endpoint policies stored at the remote host;
• send the API endpoint policy to the first server, in response to the second request;
• wherein the first server is one of a plurality of distributed CDN servers, the first request is for a service accessible via the API, and the service enables any of:
• (i) interaction with a multi-tenant storage system operated by the CDN service provider on behalf of content providers, (ii) interaction with a multi-tenant computing system operated by the CDN service provider on behalf of content providers, and (iii) configuration by a CDN user of a CDN content delivery service, said configuration comprising configuration of CDN features and services for delivering any of a website and a web application on the CDN user's behalf over the CDN.

A method, comprising:

• with at least one first server:
• receiving a first request from a client device over a network interface, the first request comprising an application programming interface (API) request;
• in response to the first request, determining a configuration file stored at the at least one first server to apply for handling the request;
• identifying, within the configuration file, a control that indicates how to handle the first request from within a set of controls stored at the at least one first server in the configuration file;
• wherein the control has a reference to an API endpoint policy that controls, at least, client authentication;
• extracting an identifier from the first request received from the client;
• in response to the identification of the control with the reference to the API endpoint policy, sending a second request that includes the extracted identifier to at least one remote host for the API endpoint policy;
• receiving the API endpoint policy from the at least one remote host in response to the second request, the API endpoint policy comprising any of data and a routine, for authenticating any of the client device, client user, and client application;
• applying the control to the request at least by applying the API endpoint policy and the routine to determine whether any of the client device, client user, and client application, is authenticated;
• based at least in part on applying the control and the API endpoint policy and successfully authenticating any of the client device, client user, and client application, sending at least a portion of the first request to a second server, the second server being an API origin for the API;
• with the at least one remote host:
• receiving the second request from the at least one first server, with the extracted identifier;
• based at least in part on the extracted identifier, selecting the API endpoint policy from amongst a plurality of API endpoint policies stored at the at least one remote host;
• sending the API endpoint policy to the at least one first server, in response to the second request;
• wherein the at least one first server is one of a plurality of distributed CDN servers, the first request is for a service accessible via the API, and the service enables any of:
• (i) interaction with a multi-tenant storage system operated by the CDN service provider on behalf of content providers, (ii) interaction with a multi-tenant computing system operated by the CDN service provider on behalf of content providers, and (iii) configuration by a CDN user of a CDN content delivery service, said configuration comprising configuration of CDN features and services for delivering any of a website and a web application on the CDN user's behalf over the CDN.