WEB service monitoring method for use in bypass mode of server protection equipment

A technology of WEB service and WEB server, which is applied in the field of WEB service monitoring of server protection equipment in bypass mode, can solve problems such as network speed delay, and achieve the effect of ensuring seamless integration

Active Publication Date: 2016-08-24
西安交大捷普网络科技有限公司
View PDF3 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The series mode is generally monitored through the mode of gateway, bridge or proxy server. Since the monitoring device is used as a gateway or bridge in the network connected in series, all data must first pass through the monitoring system, and after the analysis and inspection of the monitoring system, the It can be sent to each client, so there will be a certain delay for the network speed

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • WEB service monitoring method for use in bypass mode of server protection equipment
  • WEB service monitoring method for use in bypass mode of server protection equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0017] Such as figure 1 As shown, the client establishes a virtual connection process diagram with the Apache server, which specifically includes the following steps:

[0018] Step 101: The client sends a TCP SYN (s=100, a=0) request to the WEB server, and the request enters a switch with a mirror port, and the mirror port copies a copy of the data and sends it to the server protection device.

[0019] Step 102: The server protection device judges whether the packet destination address of the SYN request is the protected WEB server address, and if so, modifies the destination address and port of the SYN request packet to be the address and port of the Apache server.

[0020] Step 103: After the Apache server receives the SYN request packet, the first handshake is successful, and replies with a SYN-ACK packet, adding a seq value of 500 to the packet and sending it to the server protection device.

[0021] Step 104: The server protection device records the data packet and does ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a WEB service monitoring method for use in a bypass mode of server protection equipment. The method comprises the following steps: acquiring a SYN request packet sent to a WEB server by a client in the bypass mode through the server protection equipment; establishing a virtual connection between an Apache server and the client through the SYN request packet; and starting data of the Apache server for responding to the WEB server to perform rule checking. Monitoring of WEB services can be finished in the bypass mode without influencing actual network flow of a user. Meanwhile, user flow can effectively flow into the Apache server in a virtual connection way, so that seamless combination of the user flow and the Apache server is ensured, and later expansion of an Apache module is ensured.

Description

technical field [0001] The invention belongs to the technical field of network data packet analysis, and in particular relates to a method for monitoring a WEB service of a server protection device in a bypass mode. Background technique [0002] Common network monitoring modes can be divided into two types: one is serial monitoring mode, and the other is bypass monitoring mode. The series mode is generally monitored through the mode of gateway, bridge or proxy server. Since the monitoring device is used as a gateway or bridge in the network connected in series, all data must first pass through the monitoring system, and only after the analysis and inspection of the monitoring system. It can be sent to each client, so there will be a certain delay in the network speed. Bypass monitoring mode refers to monitoring through the port mirroring function of network devices such as switches. In this mode, the monitoring device only needs to be connected to the designated mirroring p...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/08H04L12/26H04L12/46H04L12/931
CPCH04L12/4641H04L43/04H04L49/208H04L67/02
Inventor 焦小涛陈晓兵陈宏伟何建锋张灿同元峰
Owner 西安交大捷普网络科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap