Intelligent Path Selection for Network Latency and Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network systems face challenges in balancing latency and security when selecting paths for client-server connections, often resulting in performance issues due to backhauled traffic through data centers, which introduces delays and vulnerabilities to attacks.
Innovation Solution
Implementing a system that initiates parallel connections, one direct from a branch office and another through a data center, using feedback from the data center connection to assess the security and latency of the direct connection, allowing for real-time selection of the most secure and low-latency path.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If backhauled connection through data center is used, then security level is improved, but network latency increases
Solution Approach 1:
The system dynamically selects between backhauled and direct connections based on real-time security assessments and latency measurements. The connection type is not fixed but adapts according to current network conditions, security requirements, and performance metrics, allowing the system to optimize the trade-off between security and latency.
Solution Approach 2:
The system segments the connection establishment process into two parallel paths: a backhauled connection through the data center for security assessment, and a direct connection for performance optimization. By dividing the connection management into separate parallel streams, the system can evaluate security through one path while maintaining low-latency capability through the other.
2Loss of time
If direct connection from branch office is used, then network latency is reduced, but security level deteriorates
Solution Approach 1:
The system performs preliminary security assessments through backhauled connections before authorizing direct connections. By conducting security checks in advance through the data center path, the system can establish direct low-latency connections with confidence that security requirements are met, without compromising security for the sake of performance.
Solution Approach 2:
The data center acts as an intermediary that performs security assessments and certificate validations. It mediates between the branch office and external servers by verifying security credentials through backhauled connections, allowing direct connections to be established with verified security posture, thus enabling performance optimization without security compromise.
3Reliability
If parallel connections are initiated for security assessment, then security level is improved, but device complexity increases
Solution Approach 1:
The system establishes parallel backhauled and direct connections temporarily for security assessment purposes, then discards the backhauled connection after verification is complete. The direct connection is recovered and maintained for actual data transmission. This approach allows security verification without permanently maintaining the complexity of dual connection paths.
Solution Approach 2:
The system creates a copy of the connection establishment process through parallel backhauled and direct connections. By copying the connection setup for assessment purposes and then using the verified direct connection for production traffic, the system can perform security checks without the ongoing overhead of maintaining complex dual-path infrastructure.
Data Source
AI summary
Described embodiments provide systems and method for intelligent path selection to reduce latency and maintain security. A client can request access to a server and multiple connections can be initiated to the requested destination, for example, a direct connection from a branch office and a backhauled connection through a data center. Traffic via the second connection can be controllable by application of at least one rule of the data center. A device can determine a delay in the exchange of data via the connections and a security level of the connections. The determination of the delay in the exchange of data via the another connection can be based on in part feedback about the application of the rule. The device can connect a client device to a server through one of the connections using the determination of the delay and the security level of the connection.