CLIENT SIDE CACHE VISIBILITY WITH TLS SESSION TICKETS

    公开(公告)号:US20200236156A1

    公开(公告)日:2020-07-23

    申请号:US16752320

    申请日:2020-01-24

    摘要: Among other things, this document describes systems, devices, and methods for using TLS session resumption tickets to store and manage information about objects that a server or a set of servers has previously delivered to a client and therefore that the client is likely to have in client-side cache. When communicated to a server later, this information can be used to drive server decisions about whether to push an object to a client, e.g., using an HTTP/2 server push function or the like, or whether to send an early hint to the client about anobject.

    SYSTEMS AND METHODS FOR PROXYING ENCRYPTED TRAFFIC TO PROTECT ORIGIN SERVERS FROM INTERNET THREATS

    公开(公告)号:US20200162432A1

    公开(公告)日:2020-05-21

    申请号:US16194022

    申请日:2018-11-16

    IPC分类号: H04L29/06

    摘要: This document describes, among other things, systems and methods for more efficiently resuming a client-to-origin TLS session through a proxy layer that fronts the origin in order to provide network security services. At the time of an initial TLS handshake with an unknown client, for example, the proxy can perform a set of security checks. If the client passes the checks, the proxy can transmit a ‘proxy token’ upstream to the origin. The origin can incorporate this token into session state data which is passed back to and stored on the client, e.g., using a TLS session ticket extension field, pre-shared key extension field, or other field. On TLS session resumption, when the client sends the session state data, the proxy can recover its proxy token from the session state data, and upon successful validation, bypass security checks that it would otherwise perform against the client, thereby more efficiently handling known clients.

    Creation and delivery of pre-rendered web pages for accelerated browsing

    公开(公告)号:US10387521B2

    公开(公告)日:2019-08-20

    申请号:US15402974

    申请日:2017-01-10

    摘要: The process of rendering web pages can be significantly improved with a content delivery system that pre-renders web content for a client device. A web page “program” can be pre-executed and the result delivered to a requesting client device, rather than or before sending a traditional set of web page components, such as a markup language document, cascading style sheets, embedded objects. This pre-execution can relieve the client device of the burden of rendering the web page, saving resources and decreasing latency before the web page is ready, and can reduce the number of network requests that the client device must make before being able to display the page. Disclosed herein are methods, systems, and devices for creating and delivering pre-rendered web pages for accelerated browsing.

    Content Delivery Network (CDN) Providing Accelerated Delivery Of Embedded Resources From CDN and Third Party Domains

    公开(公告)号:US20190243924A1

    公开(公告)日:2019-08-08

    申请号:US15890626

    申请日:2018-02-07

    IPC分类号: G06F17/30 H04L29/08

    摘要: Among other things, this document describes systems, devices, and methods for improving the delivery of resources embedded on a web page. In one embodiment, a content delivery network analyzes markup language documents that clients have requested to embedded resources, such as linked references to images, scripts, fonts, cascading style sheets, or other types of content. This analysis may be conducted on the content server and/or asynchronously, in a dedicated analytical environment, to produce delivery instructions. Where embedded resources have hostnames for which the content delivery network is authoritative, and where certain conditions are met, servers can be instructed to push additional certificates for such hostnames over the primary connection. When embedded resources have hostnames for which the platform is not authoritative, and where certain conditions are met, servers can be instructed to pre-fetch and push such resources with a signature from the authoritative origin.

    Multi-domain configuration handling in an edge network server

    公开(公告)号:US10250667B2

    公开(公告)日:2019-04-02

    申请号:US15707493

    申请日:2017-09-18

    IPC分类号: G06F15/16 H04L29/08 H04L29/12

    摘要: An Internet infrastructure delivery platform operated by a provider enables HTTP-based service to identified third parties at large scale. The platform provides this service to one or more cloud providers. The approach enables the CDN platform provider (the first party) to service third party traffic on behalf of the cloud provider (the second party). In operation, an edge server handling mechanism leverages DNS to determine if a request with an unknown host header should be serviced. Before serving a response, and assuming the host header includes an unrecognized name, the edge server resolves the host header and obtains an intermediate response, typically a list of aliases (e.g., DNS CNAMEs). The edge server checks the returned CNAME list to determine how to respond to the original request. Using just a single edge configuration, the CDN service provider can support instant provisioning of a cloud provider's identified third party traffic.

    Server initiated multipath content delivery

    公开(公告)号:US09866655B2

    公开(公告)日:2018-01-09

    申请号:US14252640

    申请日:2014-04-14

    摘要: Described herein are—among other things—systems, methods, and apparatus for accelerating and increasing the reliability of content delivery by serving objects redundantly over multiple paths from multiple servers. In preferred embodiments, the decision to use such multipath delivery is made on the server side. A content server can modify or generate a given web page so as to invoke multipath, e.g., by injecting markup language directives and/or script instructions that will cause the client device to make multiple requests for a given object on the page. Preferably the multiple requests are made to separate content servers in separate points of presence. The teachings hereof may be advantageously implemented, without limitation, in intermediary servers such as caching proxy servers and/or in origin servers.