Monitoring network performance of encrypted communications
AssigneeBladeLogic, Inc.
InventorsDanny Deschênes, Joe Pei-Wen Hsy, Pierre Larose
Life of this patent
Estimating the term…
Abstract
According to one general aspect, a method of using a first probing device may include monitoring one or more encrypted communications sessions between a first computing device and a second computing device. In some implementations of the method, each encrypted communications session includes transmitting a plurality of encrypted data objects between the first and second computing devices. The method may include deriving, by the first probing device, timing information regarding an encrypted communications session. The method may also include transmitting, from the first probing device to a second probing device, the derived timing information.
Claims17
A system for generating end-to-end performance metrics in a network, the system comprising:
- a server-side probing device disposed on a server-side network, the server-side probing device configured to:
- monitor a network communication on the server-side network, the network communication on the server-side network being encrypted;
- decrypt the network communication on the server-side network using an encryption key;
- obtain first performance metrics based on the decrypted network communication on the server-side network;
- a client-side probing device disposed on a client-side network, the client-side probing device configured to:
- monitor a network communication on the client-side network, the network communication on the client-side network being encrypted;
- obtain second performance metrics regarding the network communication monitored on the client-side network without the client-side probing device decrypting the network communication on the client-side network by examining unencrypted portions of the network communication on the client-side network;
- send the network communication on the client-side network and the second performance metrics to the server-side probing device,
- wherein the server-side probing device is configured to match the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes of each of the network communication on the server-side network and the network communication on the client-side network,
- wherein the server-side probing device is configured to provide performance metrics based on the first and second performance metrics;
- and
- a load balancer.
A method of generating end-to-end performance metrics within a system having a server device that provides an application as a service over a network to a client computing device, the method comprising:
- monitoring, by a server-side probing device, a network communication on a server-side network, the network communication on the server-side being encrypted;
- decrypting, by the server-side probing device, the network communication on the server-side network using an encryption key;
- obtaining, by the server-side probing device, first performance metrics based on the decrypted network communication on the server-side network;
- monitoring, by a client-side probing device, a network communication on a client-side network, the network communication on the client-side network being encrypted;
- obtaining, by the client-side probing device, second performance metrics regarding the network communication on the client-side network by examining unencrypted portions of the network communication on the client-side network, wherein the second performance metrics are obtained without the client-side probing device decrypting the network communication on the client-side network;
- sending, by the client-side probing device, the network communication on the client-side network and the second performance metrics to the server-side probing device;
- matching the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes of each of the network communication on the server-side and the network communication on the client-side network;
- and
- generating performance metrics based on the first and second performance metrics.
A non-transitory computer-readable medium including executable code that, when executed by at least one processor, is configured to cause a computer system to:
- monitor, at a server-side probing device, a network communication on a server-side network, the network communication on the server-side network being encrypted;
- decrypt the network communication on the server-side network using an encryption key;
- obtain, by the server-side probing device, first performance metrics based on the decrypted network communication on the server-side network;
- monitor, by a client-side probing device, a network communication on a client-side network, the network communication on the client-side network being encrypted;
- obtain, by the client-side probing device, second performance metrics regarding the network communication on the client-side network, wherein the second performance metrics are obtained without the client-side probing device decrypting the network communication on the client-side network;
- send, by the client-side probing device, the network communication on the client-side network and the second performance metrics to the server-side probing device;
- and
- provide performance metrics based on the first and second performance metrics.
Dependencies are inferred from the claim text.