-
1.
公开(公告)号:US11853776B2
公开(公告)日:2023-12-26
申请号:US18148642
申请日:2022-12-30
申请人: CLOUDFLARE, INC.
发明人: Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
IPC分类号: G06F9/448 , H04L67/00 , H04L67/02 , H04L67/10 , G06F9/455 , H04L9/40 , H04L67/53 , H04L67/63 , G06F21/53 , H04L41/50
CPC分类号: G06F9/4484 , G06F9/45558 , G06F21/53 , H04L9/40 , H04L41/50 , H04L63/10 , H04L67/02 , H04L67/10 , H04L67/34 , H04L67/53 , H04L67/63 , G06F2009/45587
摘要: A compute server receives a first request from a client device that triggers execution of a first third-party code piece. The first request is directed to a first zone. A single process at the compute server executes the first third-party code piece. As a result of executing the first third-party code piece, a second request is generated that triggers execution of a second third-party code piece. The second request is directed to a second zone. The single process executes the second third-party code piece. A response is generated to the first request based at least in part on the executed first third-party code piece and the executed second third-party code piece. The generated response is transmitted to the client device.
-
2.
公开(公告)号:US20230138161A1
公开(公告)日:2023-05-04
申请号:US18148642
申请日:2022-12-30
申请人: CLOUDFLARE, INC.
发明人: Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
IPC分类号: G06F9/448 , H04L67/00 , H04L67/02 , H04L67/10 , G06F9/455 , H04L9/40 , H04L67/53 , H04L67/63 , G06F21/53
摘要: A compute server receives a first request from a client device that triggers execution of a first third-party code piece. The first request is directed to a first zone. A single process at the compute server executes the first third-party code piece. As a result of executing the first third-party code piece, a second request is generated that triggers execution of a second third-party code piece. The second request is directed to a second zone. The single process executes the second third-party code piece. A response is generated to the first request based at least in part on the executed first third-party code piece and the executed second third-party code piece. The generated response is transmitted to the client device.
-
3.
公开(公告)号:US20200142711A1
公开(公告)日:2020-05-07
申请号:US16450585
申请日:2019-06-24
申请人: CLOUDFLARE, INC.
发明人: Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
摘要: A compute server receives a request from a client device that triggers execution of a code piece. The compute server is one of multiple compute servers that are part of a distributed cloud computing network. The request is directed to a zone. A single process at the compute server executes the code piece in an isolated execution environment. The single process is also executing other code pieces in other isolated execution environments respectively. A response is generated to the request based at least in part on the executed code piece, and the generated response is transmitted to the client device.
-
公开(公告)号:US10033692B1
公开(公告)日:2018-07-24
申请号:US15726309
申请日:2017-10-05
申请人: Cloudflare, Inc.
发明人: Marek Vavrusa , Dani Grant
摘要: A proxy server for an authoritative nameserver of a domain receives a query from a requesting device directed to the authoritative nameserver for a resource record associated with the domain. The proxy server receives the query from the requesting device instead of the authoritative nameserver for the domain. The proxy server determines that a cached record for the queried resource record is in cache available to the proxy server but is expired, and queries the authoritative nameserver of the domain for the resource record. In response to determining that the authoritative nameserver of the domain failed to respond with the queried resource record, the proxy server accesses, in the cache available to the proxy server, the cached record for the resource record that is expired, and transmits the expired cached record for the resource record to the requesting device.
-
公开(公告)号:US11736740B2
公开(公告)日:2023-08-22
申请号:US17020580
申请日:2020-09-14
申请人: Cloudflare, Inc.
发明人: Dane Orion Knecht , Igor Postelnik , Oliver Yu , John Graham-Cumming , Dani Grant , Nitin Rao
IPC分类号: H04N21/231 , H04N21/232 , H04N21/845 , H04N21/239 , H04N21/218 , H04N21/262
CPC分类号: H04N21/23103 , H04N21/2181 , H04N21/2323 , H04N21/2393 , H04N21/26258 , H04N21/8456
摘要: A server in a content delivery network (CDN) receives a request for a web page of a domain handled by an origin server. The server retrieves the web page and the web page references a video. The server retrieves a file that indicates a list of locations of the domain in which segments of the video are located. The server fetches at least an initial portion of the segments. The server receives a request for the video. The server transmits to the requester at least the initial portion of the segments. The server receives a subsequent request of a different portion of the segments. The server transmits a response to the requester that instructs the requester to transmit the request for the different portion of segments to a second server in the CDN.
-
公开(公告)号:US11316825B2
公开(公告)日:2022-04-26
申请号:US16883116
申请日:2020-05-26
申请人: CLOUDFLARE, INC.
IPC分类号: H04L61/2592 , H04L61/4511 , H04L67/02 , H04L67/01 , H04L12/46 , H04L67/1031 , H04L67/10 , H04L67/1017 , H04L61/5007
摘要: An edge server of a distributed edge compute and routing service receives a tunnel connection request from a tunnel client residing on an origin server, that requests a tunnel be established between the edge server and the tunnel client. The request identifies the hostname that is to be tunneled. An IP address is assigned for the tunnel. DNS record(s) are added or changed that associate the hostname with the assigned IP address. Routing rules are installed in the edge servers of the distributed edge compute and routing service to reach the edge server for the tunneled hostname. The edge server receives a request for a resource of the tunneled hostname from another edge server that received the request from a client, where the other edge server is not connected to the origin server. The request is transmitted from the edge server to the origin server over the tunnel.
-
公开(公告)号:US20190334869A1
公开(公告)日:2019-10-31
申请号:US16397536
申请日:2019-04-29
申请人: CLOUDFLARE, INC.
发明人: Dani Grant
摘要: An Internet of Things (IoT) protection service at the network level is described. A secure session is established between an edge server and an IoT client that is requesting to send data to an IoT device. The edge server receives the request from the IoT client over the secure session instead of the IoT device directly because a Domain Name System (DNS) request for a unique fully qualified domain name assigned to the IoT device returns an IP address of the edge server instead of an IP address of the IoT device. The edge server analyzes the request to determine whether to transmit the request to the IoT device, including applying web application firewall rule(s) against the request. If the request does not trigger any rule, then the edge server transmits the request to the IoT device. If the request triggers any rule, then the edge server blocks the request.
-
公开(公告)号:US11949647B2
公开(公告)日:2024-04-02
申请号:US17728407
申请日:2022-04-25
申请人: CLOUDFLARE, INC.
IPC分类号: H04L61/2592 , H04L12/46 , H04L61/4511 , H04L67/01 , H04L67/02 , H04L67/10 , H04L67/1017 , H04L67/1031 , H04L61/5007
CPC分类号: H04L61/2592 , H04L12/4633 , H04L12/4641 , H04L61/4511 , H04L67/01 , H04L67/02 , H04L67/10 , H04L67/1017 , H04L67/1031 , H04L61/5007
摘要: A tunnel is established between a first edge server of a distributed edge compute and routing service and a tunnel client residing on an origin server. Routing rules are installed in the edge servers of the distributed edge compute and routing service to reach the first edge server. The routing rules are based at least in part on traffic information gathered from processing other traffic that traverses the distributed edge compute and routing service. A request for content served by the origin server through the tunnel is received at a second edge server of the distributed edge compute and routing service. A path from the second edge server to the first edge server is determined based on the routing rules. The request is transmitted on the determined path. The first edge server receives the request and transmits the request to the origin server over the tunnel.
-
9.
公开(公告)号:US11561805B2
公开(公告)日:2023-01-24
申请号:US17114382
申请日:2020-12-07
申请人: CLOUDFLARE, INC.
发明人: Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
IPC分类号: G06F9/448 , H04L67/00 , H04L67/02 , H04L67/10 , G06F9/455 , H04L9/40 , H04L67/53 , H04L67/63 , G06F21/53
摘要: A compute server receives a request from a client device that triggers execution of a third-party code piece. The compute server is one of multiple compute servers that are part of a distributed cloud computing network. The request may be an HTTP request and directed to a zone. A single process at the compute server executes the third-party code piece in an isolated execution environment. The single process is also executing other third-party code pieces in other isolated execution environments respectively. A response is generated to the request based at least in part on the executed third-party code piece, and the generated response is transmitted to the client device.
-
10.
公开(公告)号:US20210089328A1
公开(公告)日:2021-03-25
申请号:US17114382
申请日:2020-12-07
申请人: CLOUDFLARE, INC.
发明人: Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
摘要: A compute server receives a request from a client device that triggers execution of a third-party code piece. The compute server is one of multiple compute servers that are part of a distributed cloud computing network. The request may be an HTTP request and directed to a zone. A single process at the compute server executes the third-party code piece in an isolated execution environment. The single process is also executing other third-party code pieces in other isolated execution environments respectively. A response is generated to the request based at least in part on the executed third-party code piece, and the generated response is transmitted to the client device.
-
-
-
-
-
-
-
-
-