公开(公告)号：US10171612B2

公开(公告)日：2019-01-01

申请号：US14981304

申请日：2015-12-28

申请人： MICROSOFT TECHNOLOGY LICENSING, LLC

发明人： Vipindeep Vangala ,  Ankur Agrawal ,  Hari Krishnan ,  Venkata Seshu Kumar Kurapati ,  Vijay Amrit Agrawal

IPC分类号： H04L29/08 ,  H04L29/06 ,  H04L12/741

摘要： Methods, systems, and computer-storage media for intelligently creating and using routing connections between on-premises servers within a client and nodes of a data center are provided. When routing connections being requested by the client are not presently established, a caching service within the data center is programmed to direct a client's cache request over available routing connections, thereby scaling out storage capacity across the data center. When routing connections being requested by the client are established, a load balancer within the data center is programmed to direct the cache request over a requested routing connection, thereby bypassing intervening hops within the data center, such as gateway nodes that host instances of the caching service. To bypass intervening hops, the client network is provided with access to a client-side routing table for identifying an appropriate network key and a connection table for identifying a routing connection mapped to the network key.

公开(公告)号：US10447684B2

公开(公告)日：2019-10-15

申请号：US14946142

申请日：2015-11-19

申请人： Microsoft Technology Licensing, LLC

发明人： Arash Ghanaie-Sichanie ,  Matthew S. Augustine ,  Dharma K. Shukla ,  Hari Krishnan ,  Matthew J. Burdick

IPC分类号： G06F15/16 ,  H04L29/06 ,  G06F21/53 ,  H04L9/32 ,  G06F17/22 ,  H04L12/911

摘要： An application host (such as a web application server) may execute a set of applications on behalf of a set of users. Such applications may not be fully trusted, and a two-way isolation of the distributed resources of an application (e.g., the executing application, the application user interface on the user's computer, and server- and client-side stored resources) from other applications may be desirable. This isolation may be promoted utilizing the cross-domain restriction policies of each user's computer by allocating a distinct subdomain of the application host for each application. The routing of network requests to a large number of distinct subdomains may be economized by mapping all distinct subdomains to the address of the domain of the application host. Moreover, the application user interfaces may be embedded in an isolation construct (e.g., an IFRAME HTML element) to promote two-way isolation among application user interfaces and client-side application resources.

公开(公告)号：US20170187820A1

公开(公告)日：2017-06-29

申请号：US14981304

申请日：2015-12-28

申请人： MICROSOFT TECHNOLOGY LICENSING, LLC

发明人： Vipindeep Vangala ,  Ankur Agrawal ,  Hari Krishnan ,  Venkata Seshu Kumar Kurapati ,  Vijay Amrit Agrawal

IPC分类号： H04L29/08 ,  H04L29/06 ,  H04L12/741

CPC分类号： H04L67/2842 ,  H04L45/54 ,  H04L67/1002 ,  H04L67/42

摘要： Methods, systems, and computer-storage media for intelligently creating and using routing connections between on-premises servers within a client and nodes of a data center are provided. When routing connections being requested by the client are not presently established, a caching service within the data center is programmed to direct a client's cache request over available routing connections, thereby scaling out storage capacity across the data center. When routing connections being requested by the client are established, a load balancer within the data center is programmed to direct the cache request over a requested routing connection, thereby bypassing intervening hops within the data center, such as gateway nodes that host instances of the caching service. To bypass intervening hops, the client network is provided with access to a client-side routing table for identifying an appropriate network key and a connection table for identifying a routing connection mapped to the network key.

公开(公告)号：US20160080358A1

公开(公告)日：2016-03-17

申请号：US14946142

申请日：2015-11-19

申请人： Microsoft Technology Licensing, LLC

发明人： Arash Ghanaie-Sichanie ,  Matthew S. Augustine ,  Dharma K. Shukla ,  Hari Krishnan ,  Matthew J. Burdick

IPC分类号： H04L29/06 ,  H04L12/911 ,  G06F17/22

CPC分类号： H04L63/083 ,  G06F17/2247 ,  G06F21/53 ,  H04L9/3234 ,  H04L47/70 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L67/42 ,  H04L2209/80

摘要： An application host (such as a web application server) may execute a set of applications on behalf of a set of users. Such applications may not be fully trusted, and a two-way isolation of the distributed resources of an application (e.g., the executing application, the application user interface on the user's computer, and server- and client-side stored resources) from other applications may be desirable. This isolation may be promoted utilizing the cross-domain restriction policies of each user's computer by allocating a distinct subdomain of the application host for each application. The routing of network requests to a large number of distinct subdomains may be economized by mapping all distinct subdomains to the address of the domain of the application host. Moreover, the application user interfaces may be embedded in an isolation construct (e.g., an IFRAME HTML element) to promote two-way isolation among application user interfaces and client-side application resources.

摘要翻译： 应用程序主机（如Web应用程序服务器）可以代表一组用户执行一组应用程序。 这样的应用可能不是完全信任的，并且应用程序的分布式资源（例如，执行应用程序，用户计算机上的应用程序用户界面以及服务器端和客户端存储的资源）与其他应用程序的双向隔离 可能是可取的。 可以通过为每个应用分配应用主机的不同子域来利用每个用户计算机的跨域限制策略来促进这种隔离。 通过将所有不同的子域映射到应用程序主机的域的地址，可以节省网络请求到大量不同子域的路由。 此外，应用程序用户界面可以嵌入到隔离构造（例如，IFRAME HTML元素）中，以促进应用程序用户界面和客户端应用程序资源之间的双向隔离。