Monitoring network performance of encrypted communications
View Patent ↗According to one general aspect, a method of using a first probing device may include monitoring one or more encrypted communications sessions between a first computing device and a second computing device. In some implementations of the method, each encrypted communications session includes transmitting a plurality of encrypted data objects between the first and second computing devices. The method may include deriving, by the first probing device, timing information regarding an encrypted communications session. The method may also include transmitting, from the first probing device to a second probing device, the derived timing information.
1. A system for generating end-to-end performance metrics in a network, the system comprising:
a server-side probing device disposed on a server-side network, the server-side probing device configured to:
monitor a network communication on the server-side network, the network communication on the server-side network being encrypted;
decrypt the network communication on the server-side network using an encryption key;
obtain first performance metrics based on the decrypted network communication on the server-side network;
a client-side probing device disposed on a client-side network, the client-side probing device configured to:
monitor a network communication on the client-side network, the network communication on the client-side network being encrypted;
obtain second performance metrics regarding the network communication monitored on the client-side network without the client-side probing device decrypting the network communication on the client-side network;
send the network communication on the client-side network and the second performance metrics to the server-side probing device,
wherein the server-side probing device is configured to match the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes of each of the network communication on the server-side network and the network communication on the client-side network,
wherein the server-side probing device is configured to provide performance metrics based on the first and second performance metrics.
2. The system of claim 1 , wherein the performance metrics include client-side latency and server-side latency.
3. The system of claim 1 , wherein the performance metrics include error rates.
4. The system of claim 1 , wherein the performance metrics includes page load times.
5. The system of claim 1 , wherein the performance metrics includes an aggregated measurement of latency and errors.
6. The system of claim 1 , further comprising a load balancer.
7. The system of claim 1 , wherein the server-side network is the Internet, and the client-side network is an Intranet.
8. The system of claim 1 , wherein the one or more network level attributes includes at least one of a client internet protocol (IP) number, a client transmission control protocol (TCP) port number, and a TCP sequence number.
9. The system of claim 1 , wherein the performance metrics are end-to-end performance metrics.
10. A method of generating end-to-end performance metrics within a system having a server device that provides an application as a service over a network to a client computing device, the method comprising:
monitoring, by a server-side probing device, a network communication on a server-side network, the network communication on the server-side being encrypted;
decrypting, by the server-side probing device, the network communication on the server-side network using an encryption key;
obtaining, by the server-side probing device, first performance metrics based on the decrypted network communication on the server-side network;
monitoring, by a client-side probing device, a network communication on a client-side network, the network communication on the client-side network being encrypted;
obtaining, by the client-side probing device, second performance metrics regarding the network communication on the client-side network;
sending, by the client-side probing device, the network communication on the client-side network and the second performance metrics to the server-side probing device;
matching the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes of each of the network communication on the server-side and the network communication on the client-side network; and
generating performance metrics based on the first and second performance metrics.
11. The method of claim 10 , wherein the performance metrics include client-side latency and server-side latency.
12. The method of claim 10 , wherein the performance metrics include error rates.
13. The method of claim 10 , wherein the performance metrics include page load times.
14. The method of claim 10 , wherein the second performance metrics are obtained without the client-side probing device decrypting the network communication on the client-side network.
15. A non-transitory computer-readable medium including executable code that, when executed by at least one processor, is configured to cause a computer system to:
monitor, at a server-side probing device, a network communication on a server-side network, the network communication on the server-side network being encrypted;
decrypt the network communication on the server-side network using an encryption key;
obtain, by the server-side probing device, first performance metrics based on the decrypted network communication on the server-side network;
monitor, by a client-side probing device, a network communication on a client-side network, the network communication on the client-side network being encrypted;
obtain, by the client-side probing device, second performance metrics regarding the network communication on the client-side network;
send, by the client-side probing device, the network communication on the client-side network and the second performance metrics to the server-side probing device; and
provide performance metrics based on the first and second performance metrics.
16. The non-transitory computer-readable medium of claim 15 , wherein the performance metrics include client-side latency and server-side latency.
17. The non-transitory computer-readable medium of claim 15 , wherein the performance metrics include error rates.
18. The non-transitory computer-readable medium of claim 15 , wherein the performance metrics includes page load times.
19. The non-transitory computer-readable medium of claim 15 , wherein the performance metrics include an aggregated measurement of latency and errors.
20. The non-transitory computer-readable medium of claim 15 , wherein the second performance metrics are obtained without the client-side probing device decrypting the network communication on the client-side network.