摘要:
The present invention provides a method, system, and computer program product for splicing proxied web requests with callback for subsequent requests. The method comprises: initiating by a proxy a Transmission Control Protocol (TCP) splice between first and second socket connections in order to service a request; and returning control of the first and second socket connections to the proxy in response to a completion event associated with the TCP splice.
摘要:
An apparatus and method for an improved bulk read socket call are provided. With the apparatus and method, a new field, so_rcvlen, is added to the socket structure that identifies the bulk read size requested by the user. The kernel of the prior art recv( ) function is also modified so that it sets the so_rcvlen to the size requested by the user prior to the recv( ) function going to sleep and waiting for the full data size requested by the user. A new flag, SP_MSGWAITALL, is also provided in the socket structure. In the TCP input processing, when data is received for a particular socket, the current setting of the SP_MSGWAITALL is checked. If the SP_MSGWAITALL flag is set, it is determined whether the amount of data stored in the socket receive buffer is less than the value of so_rcvlen. If not, the TCP input processing does not wake up the recv( ) thread. However, for every alternate segment, the TCP input processing sends back an acknowledgment (ACK). In the TCP output processing, when the SP_MSGWAITALL flag is set and the amount of data in the socket receive buffer is less than so_rcvlen, the full window is advertised. Once the TCP input processing determines that there is at least an amount of data in the socket receive buffer equal to the value of so_rcvlen, the TCP input processing will wake up the recv( ) thread and the SP_MSGWAITALL flag is reset.
摘要:
A method for efficiently determining the path maximum transmission unit (MTU) during a handshake between a source host and a target host across a computer network. During the handshake, each router receives the SYN (synchronization) packet transmitted from the source host, and each router updates the value of the path MTU within the SYN packet when the path MTU value is greater than the MTU of the router. When the SYN packet reaches the target host, the target host also updates the value of the path MTU if the value of the path MTU within the SYN packet is greater than that of the target host. With this sequential checking and updating of the path MTU against their MTUs, the combination of the routers en-route and the target host ensures that the final path MTU is equal to or smaller than the smallest MTU of the various components/networks along the path.
摘要:
A method, system, and program provide for efficient send socket call handling by a transport layer. A transport layer of a network protocol stack receives a send socket call for data of a specified length from an application layer. Responsive to detecting that there is insufficient memory for a single memory allocation to a buffer in the transport layer for at least the specified length, the transport layer blocks the send socket call. The transport layer only wakes the send socket call upon detection of sufficient memory for the single memory allocation within the buffer of the transport layer for at least the specified length, wherein waking the send socket call triggers a kernel to perform the single memory allocation in the buffer and to write the data to the single memory allocation in a single pass.
摘要:
A method in a data processing system for reducing the learning curve of a transmission control protocol connection. A domain name system is queried for information. The information and a previously used transmission control protocol parameter for a transmission control protocol connection are received from the domain name system. The information and the previously used transmission control protocol parameter are used to configure a current transmission control protocol connection.
摘要:
A system and method of responding to a flood attack on a data processing system is disclosed. The present invention mitigates the affects of SYN attacks with false IP addresses by immediately removing the associated embryonic connection from the system upon receiving notification that the IP address in the original SYN request is false. Immediate removal of the connection request will mitigate the effects of the flood attack by not requiring the system to devote resources to servicing a connection request from a false IP address, which could result in denial of service for legitimate clients. Immediate removal of the connection request will mitigate the effects of the flood attack by not requiring the system to devote resources to servicing a connection request from a false IP address, which could result in denial of service for legitimate clients.
摘要:
A method, apparatus, and computer instructions code for sending data to a destination. A set of address resolution protocol entries is searched for an entry matching an Internet Protocol address for the destination and a particular interface in response to selecting the particular interface from a set of interfaces in the data processing system to send the data to the destination. The destination has a plurality of interfaces using the Internet Protocol address with each interface in the plurality of interfaces having a different media access control address. In response to a presence of the entry in the set of address resolution protocol entries, a media access control address in the entry is used to send the data to the destination.
摘要:
Determining availability of a destination for computer network communications that include providing on a caching device a destination availability cache comprising at least one cache entry representing availability of a destination and providing, from the caching device to a source, through computer network communications, information indicating the availability of the destination. In typical embodiments, the cache entry comprises a network address of a destination device and a time limitation for the cache entry.
摘要:
A method, system, and product are described for alleviating router congestion when the router is processing packets transmitted by computer systems having a congestion notification capability. The router marks packets transmitted between a first computer system and a second computer system when the first and second computer systems have the congestion notification capability. The marking indicates that the router is moderately congested. A marked packet is then received by the first computer system. The router then drops packets transmitted by the first computer system when the packets were transmitted subsequent to the receipt of the marked packet.
摘要:
Methods, systems, and media are disclosed for improved granularity of a response-request communication on a networked computer system. One example embodiment includes receiving the request-response communication by the networked computer system, and associating the request-response communication with a port, having a nodelay setting, from a set of ports on the networked computer system. Further, the example embodiment includes enabling, based upon the associating, the nodelay setting upon connection of the request-response communication with the port. Further still, the example embodiment includes sending, in accordance with the enabling, the request-response communication to a destination in communication with the networked computer system. In addition, further example embodiments include configuring the ports on the networked computer system with nodelay values indicating whether a particular port is assigned nodelay or no nodelay for a request portion or request portion of a request-response communication connecting to that particular port.