Conditional Service Routing for Live Intermediary Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication network systems lack the ability to easily and dynamically insert additional functions affecting current traffic without service interruption, necessitating improved flexibility and resilience, especially in microservices architectures.
Innovation Solution
A dynamic routing modification process and module that allows for the conditional setup of indirect communication between services, enabling on-the-fly insertion of intermediate functions, such as security services, to manage traffic and respond to anomalies or attacks without disrupting service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If direct communication between services is maintained for continuous operation, then service availability is preserved, but the ability to insert intermediate functions (e.g., security services) is limited
Solution Approach 1:
The patent introduces an intermediary service discovery mechanism that enables dynamic insertion of intermediate services (such as security services, caching services, or monitoring services) into existing communication paths without disrupting service availability. The intermediary component acts as a mediator that can be conditionally activated based on traffic characteristics or security requirements.
Solution Approach 2:
The communication path is made dynamic by allowing conditional redirection from direct communication to indirect communication through intermediate services. The system can adapt the communication route in real-time based on detected anomalies, security threats, or performance requirements, while maintaining service continuity through automated failover mechanisms.
2Reliability
If traffic is redirected through intermediate services for enhanced security or functionality, then network resilience and security are improved, but communication latency and complexity increase
Solution Approach 1:
The patent applies intermediate services selectively based on local conditions such as detected anomalies, security threats, or specific traffic patterns. Rather than routing all traffic through intermediate services, the system dynamically determines which traffic flows require intermediate processing, thereby minimizing latency for normal traffic while providing enhanced security and functionality when needed.
Solution Approach 2:
The system implements partial redirection of traffic through intermediate services only when necessary, rather than applying intermediate processing to all traffic. This partial action approach balances security requirements with performance considerations by activating intermediate services only for suspicious or critical traffic flows.
3Productivity
If routing is modified dynamically to respond to anomalies or attacks, then rapid response capability is enhanced, but system complexity and difficulty of management increase
Solution Approach 1:
The patent implements a feedback-driven routing modification mechanism where the system continuously monitors traffic patterns, detects anomalies or security threats, and automatically adjusts routing decisions based on this feedback. The feedback loop enables rapid response to emerging threats while the automated nature of the system minimizes the complexity of manual routing management.
Solution Approach 2:
The routing modification system operates autonomously by self-managing the detection, decision-making, and implementation of routing changes. The system automatically responds to detected anomalies without requiring manual intervention, thereby reducing management complexity while maintaining rapid response capabilities.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A routing modification method is proposed for a communication network service system. This method involves, during direct communication between a first and second service, the conditional implementation of indirect communication between said services via an intermediate service. A corresponding module is also proposed.