Method and apparatus for resource locator identifier rewrite
View Patent ↗A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.
1. A method of processing a resource response, the method comprising:
receiving a response from a resource host over a non-secure hypertext transfer protocol (HTTP) session;
determining whether a content type of the response is text; and
processing the response in accordance with the determination as to whether the content type of the response is text,
wherein the response is sent directly to a client device via a secure resource access protocol when the content type is not text, and
wherein the response is modified when the content type is text, the modification applied to at least one resource locator identifier (RLI) in the message that does not designate a secure resource protocol, the RLI modified to designate a secure resource protocol, and wherein the response including the modified RLI is sent via the secure resource access protocol session to the client device.
2. The method of claim 1 , wherein the response is received by a network security proxy.
3. The method of claim 2 , wherein the response is first received by a content switch, and wherein the content switch forwards the response to the network security proxy.
4. The method of claim 1 , further comprising encrypting the response after modifying the RLI to designate a secure resource protocol.
5. The method of claim 3 , wherein the response is sent through the content switch to client device.
6. The method of claim 1 , further comprising receiving a request from the client device before receiving the response from the resource host.
7. The method of claim 6 , wherein the request is encrypted and the method further comprising:
decrypting the request by a network security proxy; and
sending the decrypted request to the resource host.
8. The method of claim 7 , wherein the request is first received by a content switch, and wherein the content switch forwards the request to the network security proxy.
9. A non-transitory computer readable storage medium having embodied thereon a program executable by a processor to perform a method of processing a resource response, the method comprising:
receiving a response from a resource host over a non-secure hypertext transfer protocol (HTTP) session;
determining whether a content type of the response is text; and
processing the response in accordance with the determination as to whether the content type of the response is text,
wherein the response is sent directly to a client device via a secure resource access protocol when the content type is not text, and
wherein the response is modified when the content type is text, the modification applied to at least one resource locator identifier (RLI) in the message that does not designate a secure resource protocol, the RLI modified to designate a secure resource protocol, and wherein the response including the modified RLI is sent via the secure resource access protocol session to the client device.
10. The non-transitory computer readable storage medium of claim 9 , wherein the response is received by a network security proxy.
11. The non-transitory computer readable storage medium of claim 10 , wherein the response is first received by a content switch, and wherein the content switch forwards the response to the network security proxy.
12. The non-transitory computer readable storage medium of claim 9 , the program being further executable to encrypt the response after modifying the RLI to designate a secure resource protocol.
13. The non-transitory computer readable storage medium of claim 11 , wherein the response is sent through the content switch to the client device.
14. The non-transitory computer readable storage medium of claim 9 , the program being further executable to receive a request from the client device before receiving the response from the resource host.
15. The non-transitory computer readable storage medium of claim 14 , wherein the request is encrypted and the program being further executable to:
decrypt the request by a network security proxy; and
send the decrypted request to the resource host.
16. The non-transitory computer readable storage medium of claim 15 , wherein the request is first received by a content switch, and wherein the content switch forwards the request to the network security proxy.
17. An apparatus processing a resource response, the apparatus comprising:
a processor;
a memory; and
a data communication network interface, wherein the processor executing instructions stored in the memory:
receives a response from a resource host over a non-secure hypertext transfer protocol (HTTP) session;
determines whether a content type of the response is text; and
processes the response in accordance with the determination as to whether the content type of the response is text;
sends the response directly to a client device via a secure resource access protocol when the content type is not text through the data communication network interface; and
modifies the response when the content type is text, the modification applied to at least one resource locator identifier (RLI) in the message that does not designate a secure resource protocol, the RLI modified to designate a secure resource protocol, and wherein the response including the modified RLI is sent via the secure resource access protocol session to the client device.
18. The apparatus of claim 17 , wherein the response is first received by a content switch, and wherein the content switch forwards the response to the processor through the data communication network interface, and wherein the processor sends the response or the modified response to the client device via the secure resource access protocol through data communication network interface and the content switch.
19. The apparatus of claim 17 , wherein the processor encrypts the response after modifying the RLI to designate a secure resource protocol.
20. The apparatus of claim 17 , wherein a request from a client device is received over the data communication network before the response from the resource host is received over the data communication network.