Edge Server Media Tunneling Through HTTP Ports
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in establishing and conducting voice and video communications across different networks, such as private and public networks, due to security policies and firewall restrictions that prohibit certain media protocols from traversing between these networks.
Innovation Solution
The implementation of an edge server, referred to as a Session Border Controller (SBC), which allows media packets to traverse through a port typically kept open by enterprise firewalls, enabling the multiplexing and demultiplexing of media streams to facilitate communication across different networks by using HTTP data traffic and media tunneling techniques.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security policies prohibit UDP and WebRTC packets from crossing firewalls, then network security is improved, but media communication capability deteriorates
Solution Approach 1:
The patent introduces an edge server as an intermediary component that sits between the private network and the firewall. This edge server receives media packets from the private network, tunnels them through the firewall using permitted protocols (HTTP/TCP), and delivers them to the destination. The intermediary approach allows the firewall to maintain its security policies while still enabling media communication by using a different transport mechanism than the blocked UDP/WebRTC protocols.
Solution Approach 2:
The patent changes the transport parameters of media packets by converting them from UDP/WebRTC to TCP/HTTP protocols. This parameter transformation allows the packets to pass through the firewall's security policies that explicitly block UDP and WebRTC while permitting TCP and HTTP traffic. The edge server performs this protocol translation, effectively changing the packet parameters to satisfy firewall requirements.
2Adaptability or versatility
If a dedicated port is opened for media traffic, then media communication capability is improved, but security control deteriorates
Solution Approach 1:
The patent makes the edge server port multi-functional by using it for both HTTP data traffic and tunneled media traffic. Instead of opening a dedicated port for media that would separate security control, the same port handles multiple purposes: standard HTTP web traffic and encrypted media tunnels. This universality allows the firewall to maintain a single open port with broad access permissions, preserving security control while enabling versatile media communication.
Solution Approach 2:
The patent implements nesting by placing media packets inside HTTP/TCP packet structures. The media traffic is nested within the HTTP protocol layers, creating a layered structure where the outer HTTP layer can pass through security filters while the inner media layer maintains its communication functionality. This nested structure allows media traffic to inherit the security clearance of HTTP traffic without requiring separate security policies.
3Device complexity
If media tunneling is implemented through existing HTTP ports, then network infrastructure complexity is reduced, but implementation complexity increases
Solution Approach 1:
The patent implements self-service by having the edge server automatically detect and handle media traffic types without requiring manual configuration of complex routing rules. The system identifies media packets based on their protocols (SIP, WebRTC, RTP) and automatically tunnels them through HTTP ports using predefined handling mechanisms. This self-service approach reduces the need for complex manual setup while maintaining the benefits of tunneling through existing infrastructure.
Solution Approach 2:
The patent performs preliminary actions by pre-configuring the edge server with protocol recognition capabilities and tunneling parameters before media traffic needs to pass through. The system is pre-programmed to identify SIP INVITE messages, WebRTC data, and RTP streams, and automatically establishes appropriate tunneling parameters in advance. This preliminary configuration eliminates the need for complex real-time decision-making during traffic flow, reducing implementation complexity while maintaining infrastructure simplicity.
Data Source
AI summary
Embodiments provide systems and methods for exchanging media through an edge server between different communication networks. More specifically, embodiments of the present disclosure provide systems and methods for establishing and conducting voice and/or video communications between one or more parties on a private network, such as within an enterprise, and one or more parties on a different network such as another private network or an open network such as the Internet using an edge server of the enterprise network. This edge server, also referred to herein as a Session Border Controller (SBC), can be adapted to allow media packets to traverse through a port typically kept open by enterprise firewalls and used for other data exchanges such as HyperText Transfer Protocol (HTTP) data traffic. The SBC can also provide multiplexing and demultiplexing of media streams through the same port and address to traverse firewalls between the different communication networks.