System and method for maintaining access to content in an encrypted network environment
View Patent ↗A system of redirecting encrypted requests for content at a web site includes the steps of receiving, at a first web site, data enabling secure communication with a client, receiving, at the first web site, a request for content from the client, identifying an alternate web site to service the request from the client and forwarding a communication associated with the request to the alternate web site including forwarding the data enabling secure communication to the alternative web site. Such an arrangement allows a web site to communicate with a client using encrypted packets without having previously set up a tunneled connection, thereby aiding in disaster recovery and providing a facilitating client proximity detection when traffic is encrypted.
1. A method of redirecting encrypted requests for content includes the steps of:
receiving, at a first content provider of a web site, data for establishing an encrypted tunnel with a client;
receiving, at the first content provider of the web site, an encrypted request for content from the client over the encrypted tunnel;
identifying an alternate content provider of the web site to service the request for content;
encapsulating the encrypted request for content to provide an encapsulated encrypted request; and
forwarding the encapsulated encrypted request for content to the alternate web site including forwarding the data for establishing an encrypted tunnel with the client to the alternate web site to enable the alternate web site to decrypt the encapsulated encrypted request.
2. The method according to claim 1 , wherein the request for content is serviced by the alternate content provider of the web site to provide a response, and further including the step of the alternate content provider encrypting the response using the data for establishing the encrypted tunnel and forwarding the response directly to the client over the encrypted tunnel.
3. The method according to claim 1 , wherein the step of encapsulating includes the step of appending a header to the encrypted request to indicate that the encapsulated encrypted request includes a pre-built packet for the client.
4. A method for disaster recover in a network wherein content is mirrored and traffic is encrypted includes the steps of:
establishing, at a first data center, an encrypted communication path for delivery of content to a client;
determining that content at the first data center is unavailable;
responsive to receipt of an encrypted request from the client for the content after determining that the content at the first data center is unavailable, encapsulating the encrypted request to provide an encapsulated encrypted request and forwarding the encapsulated encrypted request to a second data center that mirrors the content, including forwarding key data associated with the client to enable the second data center to decrypt the encapsulated encrypted request.
5. The method according to claim 4 , further comprising the step of the second data center responding directly to the client.
6. A data center storing a plurality of resources, the data center comprising:
a table for storing, for at least one resource, an address of an alternate data center that stores a mirror copy of the resource;
an interface for establishing an encrypted tunnel with a client device; and
a storage mechanism for storing data enabling secure communication with the client device using the encrypted tunnel; and
means for forwarding the data enabling secure communication with the client device using the encrypted tunnel to the alternate data center to enable the alternate data center to decrypt and service encrypted client requests when the resource at the data center is unavailable.
7. The data center according to claim 6 further comprising means, responsive to a determination that the at least one resource is unavailable at the data center, for forwarding requests received at the at least one resource to the alternate data center.
8. The data center according to claim 6 , wherein the data enabling secure communication with the client device using the encrypted tunnel includes an encryption key, and wherein the data center includes means for decrypting a request for the at least one resource from the client using the encryption key.
9. The method according to claim 4 , wherein the step of encapsulating includes the step of appending a header to the encrypted request to indicate that the encapsulated encrypted request includes a pre-built packet for the client.
10. The data center according to claim 7 , further including means for encapsulating encrypted client requests with a header to provide encapsulated encrypted client requests, wherein the header indicates that the encapsulated encrypted requests include pre-built packets.