SYSTEM AND METHOD FOR CHAOS TESTING IN AN EDGE NETWORK

    公开(公告)号:US20240073235A1

    公开(公告)日:2024-02-29

    申请号:US17898931

    申请日:2022-08-30

    申请人: Fastly, Inc.

    发明人: Kelly Shortridge

    IPC分类号: H04L9/40

    摘要: Methods and apparatus are disclosed herein that enable an infrastructure service to implement security verification without significantly interrupting end user network traffic. The infrastructure service copies request messages and modifies a portion of the header information of the request message. Both the original message and the modified message are then sent for fulfillment. The infrastructure service compares the responses in order to create a security test report.

    Direct server reply for infrastructure services

    公开(公告)号:US11706290B2

    公开(公告)日:2023-07-18

    申请号:US17502610

    申请日:2021-10-15

    申请人: Fastly, Inc.

    IPC分类号: G06F15/16 H04L67/1014

    CPC分类号: H04L67/1014

    摘要: An edge server of an infrastructure service establishes a transport connection in user space with a client and in accordance with a transport layer network protocol. The edge server receives a packet over the transport connection with the client that comprises a request for an object. If the edge server cannot serve the object, it forwards the request to a cluster server with an intent indicated for the cluster server to reply directly to the client. The cluster server receives the forwarded request and determines whether to accept the intent indicated by the edge server. If so, the edge server conveys instructions to the cluster server for sending at least a portion of the object directly to the client. The cluster server then sends at least the portion of the object to the client in accordance with the instructions.

    Isolating applications at the edge

    公开(公告)号:US11704133B2

    公开(公告)日:2023-07-18

    申请号:US17378963

    申请日:2021-07-19

    申请人: Fastly, Inc.

    IPC分类号: G06F9/445 H04L67/02 G06F8/41

    CPC分类号: G06F9/445 G06F8/41 H04L67/02

    摘要: Disclosed herein are enhancements for deploying application in an edge system of a communication network. In one implementation, a runtime environment identifies a request from a Hypertext Transfer Protocol (HTTP) accelerator service to be processed by an application. In response to the request, the runtime environment may identify an isolation resource to support the request, initiate execution of code for the application, and pass context to the code. Once initiated, the runtime environment may copy data from the artifact to the isolation resource using the context and return control to the HTTP accelerator service upon executing the code.

    MANAGEMENT OF EDGE DICTIONARIES IN A CONTENT DELIVERY NETWORK

    公开(公告)号:US20220256009A1

    公开(公告)日:2022-08-11

    申请号:US17734742

    申请日:2022-05-02

    申请人: Fastly, Inc.

    发明人: Tyler B. McMullen

    IPC分类号: H04L67/568 H04L67/02 H04L9/40

    摘要: Described herein are enhancements for operating cache nodes in a content delivery network to synchronize edge dictionary configurations. In at least one implementation, a cache node of a content delivery network receives a content request from an end user device. In response to the request, the cache node identifies a modification to a key-value pair of an edge dictionary, wherein the edge dictionary comprises a reference key-value function for a Hypertext Transfer Protocol (HTTP) accelerator service. The method further provides generating a modified version of the edge dictionary based on the modification, and transferring a notification of the modification to at least one other cache node in the content delivery network.

    Content node network address selection for content delivery

    公开(公告)号:US11336614B2

    公开(公告)日:2022-05-17

    申请号:US16894106

    申请日:2020-06-05

    申请人: Fastly, Inc.

    发明人: Artur Bergman

    摘要: Systems, methods, apparatuses, and software that select network addresses of a content node of a content delivery network are provided herein. In one example, a method of operating a control node to perform network address selection that selects between different communication service providers according to network characteristics is presented. The control node receives a domain name lookup request from an end user device to reach a content node. The control node processes network characteristics and the domain name lookup request to select a network address that corresponds to one of the communication service providers. The end user device can use the selected network address to reach the content node over the selected communication service provider.

    MEMORY MANAGEMENT USING APPROXIMATED COUNT-MIN SKETCH DATA STRUCTURES

    公开(公告)号:US20210342325A1

    公开(公告)日:2021-11-04

    申请号:US16921230

    申请日:2020-07-06

    申请人: Fastly, Inc.

    摘要: Disclosed herein are systems, methods, and software to use approximated counting with count-min sketch data structures. In one implementation, a computer may identify a value in a data object and determine whether a count identified in a count-min sketch data structure and associated with the value exceeds a threshold count. If the count does not exceed the threshold count, the computer may increase the count in a count-min sketch data structure. If the count does exceed the threshold, the computer may apply a probability function to determine whether to increase the count and, in response to the probability function indicating an increase to the count, increasing the count in the count-min sketch data structure.

    LOAD BALANCING ACROSS CERTIFICATES AND CERTIFICATE AUTHORITIES

    公开(公告)号:US20210243178A1

    公开(公告)日:2021-08-05

    申请号:US16778328

    申请日:2020-01-31

    申请人: Fastly Inc.

    发明人: Sean Leach

    摘要: Systems and methods for server authentication in a content delivery network are provided. Various embodiments include a content delivery network obtaining multiple digital certificates from multiple certificate authorities. When a client attempts to access the content delivery network, the network serves the client a digital certificate and then monitors the authentication of the certificate. If the authentication fails, the content delivery network serves the client another digital certificate that was issued from a different certificate authority. In other embodiments, the content delivery network constantly monitors the function of each certificate authority. The content delivery network constantly pings each certificate authority. If any one of the certificate authorities fails to respond to the pings, the content delivery network will presume the certificate authority is non-operational and will stop using certificates from the non-operational certificate authorities until they resume operation.

    Enhanced content route selection in content delivery networks

    公开(公告)号:US11025585B2

    公开(公告)日:2021-06-01

    申请号:US16528166

    申请日:2019-07-31

    申请人: Fastly, Inc.

    IPC分类号: H04L29/08 H04L29/12

    摘要: Systems, methods, apparatuses, and software for an edge network that serves content to end user devices is presented. In one example, a method includes establishing domain name relationships for use by a top-level DNS to recurse DNS queries to a DNS node associated with the edge network. The method also includes establishing address correlations between prefixed IPv6 network addresses and PQDNs that comprise indicators for at least a routing provider identifier and a server node grouping. The method also includes receiving recursed DNS queries and responsively translating domain names in the recursed DNS queries into associated IPv6 network addresses to reach content indicated by the domain names, the associated IPv6 network addresses each determined by at least selecting one of the prefixed IPv6 network addresses according to a desired routing provider and a desired server node grouping indicated in the PQDNs.

    MANAGING SHARED APPLICATIONS AT THE EDGE OF A CONTENT DELIVERY NETWORK

    公开(公告)号:US20210136080A1

    公开(公告)日:2021-05-06

    申请号:US17091167

    申请日:2020-11-06

    申请人: Fastly Inc.

    发明人: Tyler McMullen

    IPC分类号: H04L29/06 H04L29/08

    摘要: Disclosed herein are enhancements for deploying applications in an edge system of a communication network. In one implementation, a cache node in a content delivery network identifies a request for an application that is shared by a plurality of customers. In response to the request, the cache node determines whether the customer associated with the request is permitted to execute the application and, if permitted, initiates the application as an isolation instance. The cache node further, in response to completing the application, returns control to a source operation associated with the request.

    PERSISTENT EDGE STATE OF END USER DEVICES AT CACHE NODES

    公开(公告)号:US20210075873A1

    公开(公告)日:2021-03-11

    申请号:US16989688

    申请日:2020-08-10

    申请人: Fastly Inc.

    发明人: Simon Wistow

    IPC分类号: H04L29/08 H04L29/06

    摘要: Systems, methods, apparatuses, and software for caching tracking elements of network content are provided herein. In one example, a method of operating a cache node of a content delivery network that caches content for delivery to end user devices is provided. The method includes receiving content requests from an end user device for content cached by the cache node and responsively providing the content for delivery to the end user device, processing the content requests to determine a edge state that corresponds to the end user device, transferring information related to the edge state for delivery to at least one other cache node of the content delivery network for handling of content requests received at the at least one other cache node.