Distributed cache for state transfer operations
View Patent ↗A network arrangement that employs a cache having copies distributed among a plurality of different locations. The cache stores state information for a session with any of the server devices so that it is accessible to at least one other server device. Using this arrangement, when a client device switches from a connection with a first server device to a connection with a second server device, the second server device can retrieve state information from the cache corresponding to the session between the client device and the first server device. The second server device can then use the retrieved state information to accept a session with the client device.
1. A method for managing data in one or more cache memories, the method comprising:
receiving a request from a client device to initiate a secure socket layer (SSL) communication session, the request including an SSL session identification number from a previously established SSL communication session;
searching the one or more cache memories for information corresponding to the SSL session identification number, the information including state information of the SSL communication session;
retrieving the information corresponding to the SSL session identification number; and
re-establishing the SSL communication session at a state according to the state information.
2. The method of claim 1 , wherein the information corresponding to the SSL session identification number is located in a remote cache memory of the one or more cache memories.
3. The method of claim 1 , wherein the previously established SSL communication session was established with a full SSL handshake and the information corresponding to the previously established SSL communication was stored in the one or more cache memories after the full SSL handshake.
4. The method of claim 3 , wherein the information corresponding to the previously established SSL communication session includes at least one of a peer certificate, a cipher specification, an encryption algorithm, a message authentication check (MAC) algorithm, a compression algorithm, a master secret key, or a flag.
5. The method of claim 3 , wherein a record is also stored in the one or more cache memories, the record including SSL communication session resumption information and the SSL communication session identification number.
6. The method of claim 5 , wherein the record includes a time to live field that identifies how long a SSL communication session may operate until the SSL communication session will be terminated.
7. The method of claim 1 , further comprising at least one of adding, deleting, and updating the information corresponding to the SSL communication session in the one or more cache memories.
8. A non-transitory computer readable storage medium embodied thereon a program executable by a processor for performing a method for managing data in one or more cache memories, the method comprising:
receiving a request from a client device to initiate a secure socket layer (SSL) communication session, the request including an SSL session identification number from a previously established SSL communication session;
searching the one or more cache memories for information corresponding to the SSL session identification number, the information including state information of the SSL communication session;
retrieving the information corresponding to the SSL session identification number; and
re-establishing the SSL communication session at a state according to the state information.
9. The non-transitory computer readable storage medium of claim 8 , wherein the information corresponding to the SSL session identification number is located in a remote cache memory of the one or more cache memories.
10. The non-transitory computer readable storage medium of claim 8 , wherein the previously established SSL communication session was established with a full SSL handshake and the information corresponding to the previously established SSL communication was stored in the one or more cache memories after the full SSL handshake.
11. The non-transitory computer readable storage medium of claim 10 , wherein the information corresponding to the previously established SSL communication session includes at least one of a peer certificate, a cipher specification, an encryption algorithm, a message authentication check (MAC) algorithm, a compression algorithm, a master secret key, or a flag.
12. The non-transitory computer readable storage medium of claim 10 , wherein a record is also stored in the one or more cache memories, the record including SSL communication session resumption information and the SSL communication session identification number.
13. The non-transitory computer readable storage medium of claim 12 , wherein the record includes a time to live field that identifies how long a SSL communication session may operate until the SSL communication session will be terminated.
14. The non-transitory computer readable storage medium of claim 8 , the program further executable to add, delete, and update the information corresponding to the SSL communication session in the one or more cache memories.
15. An apparatus for managing data in one or more cache memories, the apparatus comprising:
a data communication interface, wherein a request from a client device is received over the data communication interface, the request regarding initiating a secure socket layer (SSL) communication session, the request including an SSL session identification number from a previously established SSL communication session;
a memory; and
a processor, wherein the processor executing instructions out of the memory:
manages data stored in one or more cache memories;
searches the data stored in the one or more cache memories for information corresponding to the SSL session identification number, the information including state information of the SSL communication session;
retrieves the information corresponding to the SSL session identification number; and
manages the re-establishment the SSL communication session at a state according to the state information.
16. The apparatus claim 15 , wherein the information corresponding to the SSL session identification number is located in a remote cache memory of the one or more cache memories.
17. The apparatus claim 15 , wherein the previously established SSL communication session was established with a full SSL handshake and the information corresponding to the previously established SSL communication was stored in the one or more cache memories after the full SSL handshake.
18. The apparatus claim 17 , wherein the information corresponding to the previously established SSL communication session includes at least one of a peer certificate, a cipher specification, an encryption algorithm, a message authentication check (MAC) algorithm, a compression algorithm, a master secret key, or a flag.
19. The apparatus claim 17 , wherein a record is also stored in the one or more cache memories, the record including SSL communication session resumption information and the SSL communication session identification number.
20. The apparatus claim 15 , wherein the processor executing instructions out of the memory adds, deletes, and updates the information corresponding to the SSL communication session in the one or more cache memories.