System and method for providing web browser-based secure remote network appliance configuration in a distributed computing environment
View Patent ↗A system and method for providing Web browser-based remote network appliance configuration in a distributed computing environment is described. A query message is broadcast from an applet executing within a Web browser to one or more network appliances. The network appliances are interconnected within a bounded network domain defined by a common network address space. A response message containing network settings, including a physical network address, is received by the applet from at least one such network appliance responsive to the query message and processed. A configuration packet is generated and sent using the physical network address for each at least one such network appliance sending a response message and requiring configuration.
1. A system for providing Web browser-based remote network appliance configuration in a distributed computing environment, comprising:
one or more network appliances interconnected within a bounded network domain defined by a common network address space;
a configuration client comprising an applet executing within a Web browser and configuring the network appliances, comprising:
a status module broadcasting a query message to the network appliances and processing a response message containing network settings, including a physical network address, received by the applet from at least one such network appliance responsive to the query message; and
a configuration module generating and sending a configuration packet using the physical network address for each at least one such network appliance sending a response message and requiring configuration;
a list of the network appliances maintained by the status module for each at least one such network appliance sending a response message not requiring configuration; and
a completion module receiving a status message from each at least one such network appliance requiring configuration responsive to receipt of the configuration packet;
wherein when the status message indicates an unsuccessful configuration, further comprising resending the configuration packet to the at least one such network appliance.
2. A system according to claim 1 , wherein when the status message indicates a successful configuration, further comprising sending a kickstart message to each at least one such network appliance to initiate an autonomous management session.
3. A system according to claim 1 , wherein when the status message indicates an on-going configuration, further comprising waiting for completion of configuration by the at least one such network appliance.
4. A system according to claim 1 , further comprising:
an applet database storing a plurality of applets customized for execution within each such bounded network domain; and
an applet request module receiving the applet from the applet database and installing the applet into the Web browser prior to broadcasting the query message.
5. A system according to claim 4 , wherein the applet is received in a secure session.
6. A system according to claim 1 , further comprising:
a message queue storing instructions for the applet, comprising sending at least one of the query message and the configuration packet.
7. A system according to claim 1 , further comprising:
a packet generator storing into the configuration packet values comprising at least one of hostname, domain, internet protocol address, netmask, gateway, primary domain name server, and secondary domain name server.
8. A system according to claim 1 , wherein the bounded network domain is compliant with the TCP/IP and the configuration packet is compliant with the UDP.
9. A method for providing Web browser-based remote network appliance configuration in a distributed computing environment, comprising:
broadcasting a query message from an applet executing within a Web browser to one or more network appliances interconnected within a bounded network domain defined by a common network address space;
processing a response message containing network settings, including a physical network address, received by the applet from at least one such network appliance responsive to the query message;
generating and sending a configuration packet using the physical network address for each at least one such network appliance sending a response message and requiring configuration;
updating a list of the network appliances for each at least one such network appliance sending a response message and not requiring configuration; and
receiving a status message from each at least one such network appliance requiring confirmation responsive to receipt of the configuration packet;
wherein when the status message indicates an unsuccessful configuration, further comprising:
resending the configuration packet to the at least one such network appliance.
10. A method according to claim 9 , wherein when the status message indicates a successful configuration, further comprising:
sending a kickstart message to each at least one such network appliance to initiate an autonomous management session.
11. A method according to claim 9 , wherein the status message indicates an on-going configuration, further comprising:
waiting for completion of configuration by the at least one such network appliance.
12. A method according to claim 9 , further comprising:
receiving the applet from an applet database storing a plurality of applets customized for execution within each such bounded network domain; and
installing the applet into the Web browser prior to broadcasting the query message.
13. A method according to claim 12 , further comprising:
receiving the applet in a secure session.
14. A method according to claim 9 , further comprising:
sending at least one of the query message and the configuration packet from the applet responsive to instructions maintained in a message queue.
15. A method according to claim 9 , further comprising:
storing into the configuration packet values comprising at least one of hostname, domain, internet protocol address, netmask, gateway, primary domain name server, and secondary domain name server.
16. A method according to claim 9 , wherein the bounded network domain is compliant with the TCP/IP and the configuration packet is compliant with the UDP.
17. A computer-readable storage medium holding code for performing the method according to claims 9 , 10 , 11 , 12 , 13 , 14 , 15 , or 16 .
18. A system for remotely configuring a network appliance deployed within a distributed computing environment, comprising:
at least one network appliance sending a response message containing network settings responsive to a query message broadcast over a specified network domain within which the at least one network appliance operates;
a configuration client generating a configuration package for the at least one network appliance and containing centrally managed network settings customized for the at least one network appliance;
a bootstrap module on the at least one network appliance installing the configuration package as part of an initialization bootstrap operation;
a library of applets for one or more Web browser-based configuration clients operating within the specified network domain;
a completion module sending a message comprising one of success, failure and unconfigured following configuration package installation at each such network appliance; and
a status daemon initializing a secure management session following successful configuration package installation on at least one such network appliance.
19. A system according to claim 18 , further comprising:
a centrally managed library of configurations containing network settings for each such network appliance operating with the specified network domain.
20. A system according to claim 18 , further comprising:
an applet server deploying one such applet from the library to each such configuration client using a secure session.
21. A system according to claim 18 , further comprising:
a standardized user interface exported by the configuration client and providing configuration controls for a heterogeneous set of the network appliances.
22. A system according to claim 18 , further comprising:
a package generator including at least one of a timestamp and a unique seed value in each such configuration package.
23. A system according to claim 18 , wherein at least one such network appliance performs one of electronic mail anti-virus scanning, content filtering, packet routing, and file, Web and print servicing.
24. A system according to claim 18 , wherein the distributed computing environment is TCP/IP-compliant.
25. A method for remotely configuring a network appliance deployed within a distributed computing environment, comprising:
sending a response message containing network settings from at least one network appliance responsive to a query message broadcast over a specified network domain within which the at least one network appliance operates;
generating a configuration package for the at least one network appliance and containing centrally managed network settings customized for the at least one network appliance;
installing the configuration package on the at least one network appliance as part of an initialization bootstrap operation;
maintaining a library of applets for one or more Web browser-based configuration clients operating within the specified network domain;
sending a message comprising one of success, failure and unconfigured following configuration package installation at each such network appliance; and
initializing a secure management session following successful configuration package installation on at least one such network appliance.
26. A method according to claim 25 , further comprising:
centrally managing a library of configurations containing network settings for each such network appliance operating with the specified network domain.
27. A method according to claim 25 , further comprising:
deploying one such applet from the library to each such configuration client using a secure session.
28. A method according to claim 25 , further comprising:
exporting a standardized user interface providing configuration controls for a heterogeneous set of the network appliances.
29. A method according to claim 25 , further comprising:
including at least one of a timestamp and a unique seed value in each such configuration package.
30. A method according to claim 25 , wherein at least one such network appliance performs one of electronic mail anti-virus scanning, content filtering, packet routing, and file, Web and print servicing.
31. A method according to claim 25 , wherein the distributed computing environment is TCP/IP-compliant.
32. A computer-readable storage medium holding code for performing the method according to claims 25 , 26 , 27 , 28 , 29 , 30 , or 31 .