Flow tagging for service policy implementation
A flow tagging technique includes tagging a data flow at a plurality of points in the data flow. For example, the data flow can be tagged at a socket and at a proxy manager API. By tagging the data flow at multiple points, it becomes possible to map network service usage activities to the appropriate initiating applications.
1. A system, comprising:
a network stack;
a proxy service manager coupled to the network stack;
a socket manager coupled to the network stack; and
a traffic classification and enforcement engine coupled to the network stack;
wherein, in operation for any given initiator from a plurality of initiators of network activities, the given initiator requesting a network activity traffic flow on an associated thread:
the proxy service manager tags the network activity traffic flow at a first point in the flow, wherein the first point is associated with an Application Programming Interface (API) call from the given initiator to the proxy service manager;
the proxy service manager registers the thread at the network stack;
the socket manager tags the network activity traffic flow at a second point in the flow, wherein the second point is associated with a socket call to the socket manager for the thread and a socket for the flow;
the socket manager registers the socket at the network stack;
the traffic classification and enforcement engine uses the registration of the thread and the registration of the socket to determine that the network activity traffic flow is associated with the given initiator of the network activity, wherein the initiator of the network activity is not the proxy service manager; and
the traffic classification and enforcement engine enforces service policies on the network activity traffic flow, the service policies associated with the given initiator of the network activity.