Connector Server Load Balancing for Private Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for accessing private networks through the Internet face challenges in load-balancing connections between public and private computer networks, leading to performance degradation, security risks, and inefficiencies due to the inability to scale effectively and manage traffic loads.
Innovation Solution
Implementing a load-balancing system that distributes connections among multiple groups of connector servers and clients, allowing for server-level and client-level load-balancing, which assigns connector servers and clients to groups based on connection loads to optimize resource allocation and manage traffic efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple connector servers are employed with a traditional load balancer, then the system can handle more connections, but traffic is routed through the same connector server leading to performance degradation
Solution Approach 1:
The patent segments connector servers into multiple groups (first group, second group, etc.) and distributes connector clients to different groups based on connection requests. This segmentation prevents all traffic from being routed through the same connector server, thereby maintaining performance while handling increased connection loads across the distributed groups.
2Device complexity
If a single connector server is used, then the system is simple to manage, but the connector server becomes overloaded and cannot adequately handle the load
Solution Approach 1:
The system divides connector servers into multiple manageable groups, each handling a subset of connector clients. This segmentation allows the system to scale capacity by adding more groups while maintaining relatively simple management through consistent load balancing logic distributed across groups.
Solution Approach 2:
The load balancing system dynamically determines which connector server group to use based on current connection loads and availability. This dynamic allocation allows the system to adapt to changing traffic patterns and server capacities, optimizing resource utilization without requiring complex manual configuration.
3Ease of operation
If connector clients establish connections to access private networks, then network access is enabled, but security risks increase due to exposure to Internet threats
Solution Approach 1:
The patent introduces connector servers as intermediary components between the Internet and private networks. These servers act as secure gateways that authenticate and manage connections, allowing network access while filtering and controlling traffic to mitigate security risks from Internet threats.
4Productivity
If traditional load balancing is implemented, then traffic distribution is achieved, but the system cannot scale effectively beyond a few connector clients per connector server
Solution Approach 1:
By segmenting connector servers into multiple groups that can be independently scaled, the system achieves both effective traffic distribution within groups and overall system scalability. Each group can be managed and scaled independently, allowing the system to grow by adding more groups without being constrained by per-server client limits.
Data Source
AI summary
Techniques are described herein that are capable of load-balancing establishment of connections among groups of connector servers in a public computer network by performing operations that include receiving a connection request from a connector client in a private computer network, requesting establishment of a connection between the connector client and one of the connector servers in the public computer network. A number of connections between the private computer network and each group is determined. An identified group is selected from the groups based at least in part on a number of connections between the private computer network and the identified group being less than or equal to a number of connections between the private computer network and each other group. The connection request is provided toward the identified group, which enables establishment of the connection between the connector client and a connector server in the identified group.