Monitoring network performance of encrypted communications
View Patent ↗According to one general aspect, a method of using a first probing device may include monitoring one or more encrypted communications sessions between a first computing device and a second computing device. In some implementations of the method, each encrypted communications session includes transmitting a plurality of encrypted data objects between the first and second computing devices. The method may include deriving, by the first probing device, timing information regarding an encrypted communications session. The method may also include transmitting, from the first probing device to a second probing device, the derived timing information.
1. A system for generating end-to-end performance metrics in a network, the system comprising:
a load balancer device;
a server-side monitoring agent disposed on a server-side network and communicatively coupled to the load balancer device, the server-side monitoring agent configured to:
monitor a network communication on the server-side network, the network communication on the server-side network being encrypted; and
obtain first performance metrics based on the network communication on the server-side network; and
a client-side monitoring agent disposed on a client-side network, the client-side monitoring agent configured to:
monitor a network communication on the client-side network, the network communication on the client-side network being encrypted;
obtain second performance metrics regarding the network communication monitored on the client-side network without the client-side monitoring agent decrypting the network communication on the client-side network by examining unencrypted portions of the network communication on the client-side network; and
send the network communication on the client-side network and the second performance metrics to the server-side monitoring agent,
wherein the server-side monitoring agent is configured to correlate the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes, wherein the server-side monitoring agent is configured to provide performance metrics based on the first and second performance metrics.
2. The system of claim 1 , wherein the performance metrics include client-side latency and server-side latency.
3. The system of claim 1 , wherein the performance metrics include error rates.
4. The system of claim 1 , wherein the performance metrics includes page load times.
5. The system of claim 1 , wherein the performance metrics includes an aggregated measurement of latency and errors.
6. The system of claim 1 , wherein the server-side network is the Internet, and the client-side network is an Intranet.
7. The system of claim 1 , wherein the one or more network level attributes includes at least one of a client internet protocol (IP) number, a client transmission control protocol (TCP) port number, and a TCP sequence number.
8. The system of claim 1 , wherein the performance metrics are end-to-end performance metrics.
9. A method of generating end-to-end performance metrics within a system having a server device that provides an application as a service over a network to a client computing device, the method comprising:
monitoring, by a server-side monitoring agent, a network communication on a server-side network, the network communication on the server-side being encrypted, the server-side monitoring agent being communicatively coupled to a load balancer device;
obtaining, by the server-side monitoring agent, first performance metrics based on the network communication on the server-side network;
monitoring, by a client-side monitoring agent, a network communication on a client-side network, the network communication on the client-side network being encrypted;
obtaining, by the client-side monitoring agent, second performance metrics regarding the network communication on the client-side network by examining unencrypted portions of the network communication on the client-side network, wherein the second performance metrics are obtained without the client-side monitoring agent decrypting the network communication on the client-side network;
sending, by the client-side monitoring agent, the network communication on the client-side network and the second performance metrics to the server-side monitoring agent;
correlating the network communication on the server-side network and the network communication on the client-side network based on one or more network level attributes; and
generating performance metrics based on the first and second performance metrics.
10. The method of claim 9 , wherein the performance metrics include client-side latency and server-side latency.
11. The method of claim 9 , wherein the performance metrics include error rates.
12. The method of claim 9 , wherein the performance metrics include page load times.
13. A non-transitory computer-readable medium including executable code that, when executed by at least one processor, is configured to cause a computer system to:
monitor, at a server-side monitoring agent, a network communication on a server-side network, the network communication on the server-side network being encrypted, the server-side monitoring agent being communicatively coupled to a load balancer device;
obtain, by the server-side monitoring agent, first performance metrics based on the network communication on the server-side network;
monitor, by a client-side monitoring agent, a network communication on a client-side network, the network communication on the client-side network being encrypted;
obtain, by the client-side monitoring agent, second performance metrics regarding the network communication on the client-side network, wherein the second performance metrics are obtained without the client-side monitoring agent decrypting the network communication on the client-side network;
send, by the client-side monitoring agent, the network communication on the client-side network and the second performance metrics to the server-side monitoring agent; and
provide performance metrics based on the first and second performance metrics.
14. The non-transitory computer-readable medium of claim 13 , wherein the performance metrics include client-side latency and server-side latency.
15. The non-transitory computer-readable medium of claim 13 , wherein the performance metrics include error rates.
16. The non-transitory computer-readable medium of claim 13 , wherein the performance metrics includes page load times.
17. The non-transitory computer-readable medium of claim 13 , wherein the performance metrics include an aggregated measurement of latency and errors.