Elastic security services load balancing in a wireless mesh network
The present disclosure distributes processing capabilities throughout different nodes in a wireless network. Methods and apparatus consistent with the present disclosure increase the efficiency of communications in a wireless network because they help minimize the need to forward communications to other nodes in the network by allowing different wireless nodes to receive and store content ratings regarding requested content in caches associated with respective wireless nodes. Apparatus and methods consistent with the present disclosure perform a load balancing function because they distribute content ratings to different nodes in a wireless network without increasing messaging traffic. As response messages regarding access requests are passed back to a requestor, cache memories at nodes along a communication path are updated to include information that cross-references data identifiers with received content ratings. The cross-referenced data identifiers and content ratings allow each respective wireless node along the communication path to block requests to bad content.
1. A method for controlling network traffic in a wireless mesh network, the method comprising:
receiving a request to access digital data at a first wireless mesh node, wherein a cache memory of the first wireless mesh node does not store information regarding the digital data;
identifying that a second wireless mesh node having access to information regarding the digital data and to which the first wireless mesh node forwarded the request has failed;
forwarding the request from the first wireless mesh node to a third wireless mesh node having access to the information regarding the digital data and following failure of the second wireless mesh node;
receiving an indication from the third wireless mesh node that the request is blocked based on the requested digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node, wherein the bad reputation rating indicates at least one of the wireless mesh nodes is compromised by malware and that the at least one wireless mesh node is to be quarantined from the wireless mesh network;
storing the indication that the requested digital data has the bad reputation rating at the cache memory local to the first wireless mesh node; and
blocking a subsequent request to access the digital data, the subsequent request blocked by the first wireless mesh node based on the stored indication in the cache memory local to the first wireless mesh node.
2. The method of claim 1 , further comprising:
identifying a plurality of additional wireless mesh nodes in the wireless mesh network; and
forwarding the indication of the bad reputation rating to the plurality of additional wireless mesh nodes, wherein each of the additional wireless mesh nodes stores the bad reputation rating in a respective cache memory local to the additional wireless mesh node, and wherein a subsequent request received by one or more of the additional wireless mesh node is blocked.
3. The method of claim 1 , wherein a plurality of additional wireless mesh nodes is configured to access a computing device that stores reputation information, and wherein the computing device is configured to block an access request received by one or more of the plurality of additional wireless mesh nodes based on the reputation information without communicating with one or more of the wireless mesh nodes.
4. The method of claim 1 , further comprising:
identifying one or more redundant requests with the bad reputation rating at one or more of the first, second, or third wireless mesh nodes; and
sending an indication regarding the redundant requests to a designated user device when a threshold number of the redundant requests with the bad reputation rating is reached.
5. The method of claim 1 , further comprising storing information in the cache memory of the first wireless node that identifies a time-to-live for data stored at the cache memory of either of the first, second, or third wireless mesh nodes.
6. The method of claim 5 , further comprising deleting the data stored at one or more of the wireless mesh nodes that associates the bad reputation rating with the digital data identifier after a time period that corresponds to or exceeds the time-to-live.
7. The method of claim 1 , wherein the first wireless node is a mesh portal that sends the request to a security computer, wherein the security computer is configured to access a plurality of databases that store rating information.
8. The method of claim 7 , wherein the security computer performs a plurality of tests on the request, the tests including interpreting or manipulating received data in the request or performing a deep packet inspection in a secure environment.
9. A non-transitory computer-readable storage medium having embodied therein a program executable by a processor for implementing a method for controlling network traffic in a wireless mesh network, the method comprising:
receiving a request to access digital data at a first wireless mesh node, wherein a cache memory of the first wireless mesh node does not store information regarding the digital data;
identifying that a second wireless mesh node having access to information regarding the digital data and to which the first wireless mesh node forwarded the request has failed;
forwarding the request from the first wireless mesh node to a third wireless mesh node having access to the information regarding the digital data and following failure of the second wireless mesh node;
receiving an indication from the third wireless mesh node that the request is blocked based on the requested digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node, wherein the bad reputation rating indicates at least one of the wireless mesh nodes is compromised by malware and that the at least one wireless mesh node is to be quarantined from the wireless mesh network;
storing the indication that the requested digital data has the bad reputation rating at a cache memory local to the first wireless mesh node; and
blocking a subsequent request to access the digital data, the subsequent request blocked by the first wireless mesh node based on the stored indication in the cache memory local to the first wireless mesh node.
10. The non-transitory computer-readable storage medium of claim 9 , further comprising instructions executable to:
identify a plurality of additional wireless mesh nodes in the wireless mesh network; and
forward the indication of the bad reputation rating to the plurality of additional wireless mesh nodes, wherein each of the additional wireless mesh nodes stores the bad reputation rating at a respective cache memory local to the additional wireless mesh node, and wherein a subsequent request received by one or more of the additional wireless mesh node is blocked.
11. The non-transitory computer-readable storage medium of claim 9 , wherein a plurality of additional wireless mesh nodes is configured to access a computing device that stores reputation information, and wherein the computing device is configured to block an access request received by one or more of the plurality of additional mesh nodes based on the reputation information without communicating with one or more of the wireless mesh nodes.
12. The non-transitory computer-readable storage medium of claim 9 , further comprising instructions executable to:
identify one or more redundant requests with the bad reputation rating at one or more of the first, second, or third wireless mesh nodes; and
send an indication regarding the redundant requests to a designated user device when a threshold number of the redundant requests with the bad reputation rating is reached.
13. The non-transitory computer-readable storage medium of claim 9 , further comprising instructions executable to store information in the cache memory of the first wireless node that identifies a time-to-live for data stored at the cache memory of either of the first, second, or third wireless mesh nodes.
14. A system for controlling network traffic in a wireless mesh network, the system comprising:
a communication interface that communicates over a communication network with a plurality of wireless mesh nodes of a wireless mesh network; and
a processor that executes instructions stored in memory, wherein the processor executes the instructions to:
receive a request to access digital data at a first wireless mesh node, wherein a cache memory of the first wireless mesh node does not store information regarding the digital data;
identify that a second wireless mesh node having access to information regarding the digital data and to which the first wireless mesh node forwarded the request has failed;
forward the request from the first wireless mesh node to a third wireless mesh node having access to the information regarding the digital data and following failure of the second wireless mesh node;
receive an indication from the third wireless mesh node that the request is blocked based on the requested digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node, wherein the bad reputation rating indicates at least one of the wireless mesh nodes is compromised by malware and that the at least one wireless mesh node is to be quarantined from the wireless mesh network;
storing the indication that the requested digital data has the bad reputation rating at the cache memory local to the first wireless mesh node; and
block a subsequent request to access the digital data, the subsequent request blocked by the first wireless mesh node based on the stored indication in the cache memory local to the first wireless mesh node.
15. The system of claim 14 , wherein the processor executes further instructions to:
identify a plurality of additional wireless mesh nodes in the wireless mesh network; and
forward the indication of the bad reputation rating to the plurality of additional wireless mesh nodes, wherein each of the additional wireless mesh nodes stores the bad reputation rating at a respective cache memory local to the additional wireless mesh node, and wherein a subsequent request received by the additional wireless mesh node is blocked.
16. The system of claim 14 , wherein a plurality of additional wireless mesh nodes is configured to access a computing device that stores reputation information, and wherein the computing device is configured to block an access request received by one or more of the plurality of additional wireless mesh nodes based on the reputation information without having communicating with one or more of the wireless mesh nodes.
17. The system of claim 14 , wherein the processor executes further instructions to:
identify one or more redundant requests with the bad reputation rating at one or more of the first, second, or third wireless mesh nodes; and
send an indication regarding the redundant requests to a designated user device when a threshold number of redundant requests with the bad reputation rating is reached.