Elastic security services load balancing in a wireless mesh network
The present disclosure distributes processing capabilities throughout different nodes in a wireless network. Methods and apparatus consistent with the present disclosure increase the efficiency of communications in a wireless network because they help minimize the need to forward communications to other nodes in the network by allowing different wireless nodes to receive and store content ratings regarding requested content in caches associated with respective wireless nodes. Apparatus and methods consistent with the present disclosure perform a load balancing function because they distribute content ratings to different nodes in a wireless network without increasing messaging traffic. As response messages regarding access requests are passed back to a requestor, cache memories at nodes along a communication path are updated to include information that cross-references data identifiers with received content ratings. The cross-referenced data identifiers and content ratings allow each respective wireless node along the communication path to block requests to bad content.
1 . A method for controlling network traffic in a wireless mesh network, the method comprising:
receiving a request to access digital data at a first wireless mesh node, wherein a cache memory of the first wireless mesh node does not store information regarding the digital data;
identifying that a second wireless mesh node associated with processing requests for the digital data and to which the first wireless mesh node forwarded the request has failed;
forwarding the request from the first wireless mesh node to a third wireless mesh node associated with processing requests for the digital data and following failure of the second wireless mesh node;
receiving an indication from the third wireless mesh node that the request is blocked based on digital content associated with the request for digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node;
storing the indication that the requested digital content has the bad reputation rating at the cache memory of the first wireless mesh node; and
blocking a subsequent request to access the digital content, the subsequent request blocked by the first wireless mesh node based on the stored indication in the cache memory of the first wireless mesh node.
2 . The method of claim 1 , wherein the request includes a website access request that is associated with the bad reputation, and wherein the cache memory of the third wireless mesh node stores a rating indicating that the website is associated with the bad reputation.
3 . The method of claim 1 , wherein the third wireless mesh node blocks the request and sends the indication to the first mesh node, the indication indicating that the block was based on the bad reputation.
4 . The method of claim 1 , wherein the stored indication in the cache memory of the first wireless mesh node further indicates that a website requested by the request is associated with the bad reputation.
5 . The method of claim 1 , wherein the stored indication in the cache memory of the first wireless mesh node further indicates that digital content requested by the request is associated with the bad reputation, wherein the subsequent request concerns access to the digital content, and wherein the subsequent request is blocked without sending the request to a wireless access point.
6 . The method of claim 1 , wherein the request passes through one or more different sets of wireless mesh nodes based on one or more of relative device locations, relative signal strengths, and an operational status of one or more of the wireless mesh nodes in the wireless mesh network.
7 . The method of claim 1 , further comprising:
identifying that the request is a redundant request that has traversed multiple hops in the wireless mesh network before an indication of the bad reputation was passed back to the first wireless mesh node;
identifying a number of attempts associated with the redundant request; and
transmitting a message regarding the redundant request to a designated recipient based on the number of attempts meeting a threshold.
8 . A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor to perform a method for controlling network traffic in a wireless mesh network, the method comprising:
receiving a request to access digital data at a first wireless mesh node, wherein a cache memory of the first wireless mesh node does not store information regarding the digital data;
identifying that a second wireless mesh node associated with processing requests for the digital data and to which the first wireless mesh node forwarded the request has failed;
forwarding the request from the first wireless mesh node to a third wireless mesh node associated with processing requests for the digital data and following failure of the second wireless mesh node;
receiving an indication from the third wireless mesh node that the request is blocked based on digital content associated with the request for digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node;
storing the indication that the requested digital content has the bad reputation rating at the cache memory of the first wireless mesh node; and
blocking a subsequent request to access the digital content, the subsequent request blocked by the first wireless mesh node based on the stored indication in the cache memory of the first wireless mesh node.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein the request includes a website access request that is associated with the bad reputation, and wherein the cache memory of the third wireless mesh node stores a rating indicating that the website is associated with the bad reputation.
10 . The non-transitory computer-readable storage medium of claim 8 , wherein the third wireless mesh node blocks the request and sends the indication to the first mesh node, the indication indicating that the block was based on the bad reputation.
11 . The non-transitory computer-readable storage medium of claim 8 , wherein the stored indication in the cache memory of the first wireless mesh node further indicates that a website requested by the request is associated with the bad reputation.
12 . The non-transitory computer-readable storage medium of claim 8 , wherein the stored indication in the cache memory of the first wireless mesh node further indicates that digital content requested by the request is associated with the bad reputation, wherein the subsequent request concerns access to the digital content, and wherein the subsequent request is blocked without sending the request to a wireless access point.
13 . The non-transitory computer-readable storage medium of claim 8 , wherein the request passes through multiple wireless mesh nodes based on one or more of relative device locations, relative signal strengths, and an operational status of one or more of the multiple wireless mesh nodes in the wireless mesh network.
14 . The non-transitory computer-readable storage medium of claim 8 , further comprising instructions executable to:
identify that the request is a redundant request that has traversed multiple hops in the wireless mesh network before an indication of the bad reputation was passed back to the first wireless mesh node;
identify a number of attempts associated with the redundant request; and
transmit a message regarding the redundant request to a designated recipient based on the number of attempts meeting a threshold.
15 . A system for controlling network traffic in a wireless mesh network, the system comprising:
local cache memory;
a communication interface that communications over a communication network, wherein the communication interface receives a request to access digital data, wherein the local cache memory does not store information regarding the digital data; and
a processor that executes instruction stored in memory, wherein the processor executes the instructions to identify that a second wireless mesh node associated with processing requests for the digital data and to which the request is forwarded has failed;
wherein the communication interface:
forwards the request to a third wireless mesh node associated with processing requests for the digital data and following failure of the second wireless mesh node; and
receives an indication from the third wireless mesh node that the request is blocked based on digital content associated with the request for digital data having a bad reputation rating indicated by stored information in a cache memory of the third wireless mesh node;
wherein the local cache memory further stores the indication that the requested digital content has the bad reputation rating; and
wherein the processor executes further instructions to block a subsequent request to access the digital content, the subsequent request blocked based on the stored indication in the local cache memory.
16 . The system of claim 15 , wherein the request includes a website access request that is associated with the bad reputation, and wherein the cache memory of the third wireless mesh node stores a rating indicating that the website is associated with the bad reputation.
17 . The system of claim 15 , wherein the third wireless mesh node blocks the request and sends the indication to the communication interface, the indication indicating that the block was based on the bad reputation.
18 . The system of claim 15 , wherein the stored indication in the local cache memory further indicates that a website requested by the request is associated with the bad reputation.
19 . The system of claim 15 , wherein the stored indication in the local cache memory further indicates that digital content requested by the request is associated with the bad reputation, wherein the subsequent request concerns access to the digital content, and wherein the subsequent request is blocked without sending the request to a wireless access point.
20 . The system of claim 15 , wherein the request passes through one or more different sets of wireless mesh nodes based on one or more of relative device locations, relative signal strengths, and an operational status of one or more of the wireless mesh nodes in the wireless mesh network.
21 . The system of claim 15 , wherein the processor executes further instructions to:
identify that the request is a redundant request that has traversed multiple hops in the wireless mesh network before an indication of the bad reputation was passed back to the communication interface; and
identify a number of attempts associated with the redundant request, wherein the communication interface transmits a message regarding the redundant request to a designated recipient based on the number of attempts meeting a threshold.