KR200372805Y1 - Proxy/cache server with embeded operating system - Google Patents

Abstract

The present invention relates to a proxy / cache server having an embedded operating system, and a switching hub 23 for connecting a plurality of clients 21 and 22 and the plurality of clients 21 and 22 to form a predetermined internal network. And a proxy / cache server 24 connected to the switching hub 23, a cache memory 25 connected to the proxy / cache server 24 and storing predetermined data, and a dedicated line C2. A router 26 connecting the internet network 28 and the proxy / cache server 24 and a modem connecting the proxy / cache server 24 through the communication network C3 connected to the internet network 28 ( 27, the proxy / cache server 24 is connected to the switching hub 23 through a multi-channel (C1), the disk on memory for storing an embedded operating system (Disk On Memory) ) And the switching hub 23 It characterized by including the internal network interface unit for supplying a multi-channel group (C1), the router 26 and the modem 27 interfaces external network that is connected to the unit.

Description

Proxy / cache server with embeded operating system}

The present invention relates to a proxy / cache server, and more particularly, to a proxy / cache server having an embedded operating system capable of providing requested information to an internet user in a short time by reducing the overall traffic volume of the internet and reducing the response time for the internet user. will be.

In recent years, there has been an increasing number of Internet subscribers (or Internet users) who subscribe to an Internet information provider to obtain information and transmit and receive data provided through the Internet. Internet users exchange large amounts of data, such as multimedia, with Internet information providers or other Internet users.

However, because the physical network is limited and the bandwidth of the network is limited, the amount of data and the number of Internet users accessing the Internet increase, causing frequent bottlenecks in the Internet network. There is a problem that you can not get the desired information or to send and receive data quickly.

In addition, malicious intruders from outside and outside can invade the Internet service provider's server and cause the server to fail to provide the service or compromise the server's security to extract sensitive information from it.

To solve this problem, a proxy / cache server is used. The proxy / cache server is installed together with a server forming a predetermined network to provide information to Internet users quickly and to enhance the security of the server. have..

1 is a block diagram illustrating a service providing system using a conventional proxy / cache server.

As shown, a conventional service providing system using a proxy / cache server includes a switching hub 13 connecting a client 11 and 12 such as a personal computer and the client 11 and 12 to form a predetermined internal network. And a proxy / cache server 14 that receives the address data transmitted by the switching hub 13, checks whether the address data exists in the cache memory 15, and transmits the requested information to the Internet user. The server 14 includes a modem 16 for connecting the server 14 with the Internet through a dedicated line network or an ADSL network, and an external web server 18 connected with the Internet.

At this time, when the proxy / cache server 14 receives the corresponding information from the external web server 18 after transmitting the corresponding address data through the dedicated line network or the ADSL network, the proxy / cache server 14 copies the information and stores it in the cache memory 15. Send to client 11.

On the other hand, like the client 11, when another client 12 enters the address data into its web browser to connect to the external web server 18 used by the client 11, the address data is converted to a switching hub ( 13) to the proxy / cache server 14. The proxy / cache server 14 checks whether the address data is in the cache memory 15, and if there is the address data, sends the corresponding information to the client 11 directly.

However, due to the development of the Internet technology, the increase and the amount of data to be transmitted and received, as well as the increase in the Internet usage, the clients that are initially installed and used are being upgraded. As a result, proxy / cache servers and their associated devices must always be upgraded to the latest computers and servers, and their replacement cycles are getting faster. Therefore, the service providing system using the conventional proxy / cache server has a problem that the maintenance cost is quite high.

2 is a flowchart illustrating a booting process of a proxy / cache server used in a service providing system using a conventional proxy / cache server.

If an operating system such as Linux is installed on the proxy / cache server, when power is applied by pressing the power switch (S1), the BIOS (Basic Input Output System) checks the hardware and server for physical damage ( S2), if no abnormality is found, the boot program is loaded by searching for a hardware booting medium (S3). In general, most systems load a boot program from the hard disk. Then, the Linux kernel is loaded, the kernel image is loaded into memory, decompressed, and a kernel boot is performed to check and recognize the hardware (S4). During the kernel boot phase, the file system is checked to check the system for a relatively long time in the event of abnormal termination or integrity problems. At this time, the larger the capacity of the hard disk, the longer the inspection time. Then all the processors (network tasks, mouse usage, I / O functions, etc.) needed by the operating system to execute its task are loaded into memory and executed (S5). Next, although not a booting process, a RUNlevel is performed, and a login is displayed on the screen by the run script. All subsequent work is done by the proxy / cache server application using middleware.

However, if the hardware of the proxy / cache server is unstable or the power supply is unstable, it causes a big problem for the operating system such as Linux installed on the server, and thus cannot act as a gateway from inside and outside. In other words, since a conventional proxy / cache server stores an operating system and all data on a hard disk drive, when a failure occurs, the boot time may be very slow or may not boot.

Therefore, Internet users often encounter situations where they cannot use the service or the Internet service provider cannot provide the service. There is a problem that such a failure can be solved only by an expert on the corresponding operating system.

3 is a diagram illustrating a network interface of a conventional proxy / cache server.

The conventional proxy / cache server 14 is connected to a switching hub 13 forming an internal network and a modem 16 forming an external network such as a dedicated network through an interface unit having one channel. Therefore, when a plurality of Internet users of the internal network request information from the proxy / cache server through the internal network interface unit S11 having one channel, the software for the proxy / cache server S12 is low-speed according to the request. Through the external network interface unit S13 connected to the external network, the corresponding information is obtained from the Internet 14 or the information stored in the cache memory is provided. Therefore, since the conventional proxy / cache server uses only one channel, there is a problem that bottlenecks always occur.

A method of providing a service to a client by a service providing system using a conventional proxy / cache server configured as described above will be described below with reference to the accompanying drawings.

4 is a flowchart illustrating a service providing method of a service providing system using a conventional proxy / cache server.

First, when an Internet user of an internal network requests information on a site operated by an external web server by inputting a predetermined Internet address (URL) into a web browser installed on a personal computer (S21), The application program of the proxy / cacher server acquires information of the Internet user (S22). From the obtained information, it is determined whether the information requested by the Internet user is information on a harmful site or a site registered in a block list (S23). If the request information is in a restricted access site, the server transmits an access disable message to the Internet user (S24), and if the access is permitted, it is determined whether there is information corresponding to the cache memory (S25). If the requested information is in the cache memory and transmits the information to the Internet user (S29), if not, the information is requested to the external web server (S26). When the information is received from the external web server S26, the information is stored in the cache memory (S27), and then the information is transmitted to the Internet user (S28). Therefore, the Internet user can obtain the requested information through a web browser.

The service providing method of the service providing system using the conventional proxy / cache server has the following problems.

First, there is a difference in service speed depending on hardware characteristics and performance.

Because it is in the form of operating system-based software such as Linux, it basically requires as much system resources as an operating system such as Linux. In addition, since the operating system occupies 20-30% of the system's total performance, continuous upgrading is required when the system's performance is low, resulting in a cost. On the other hand, it is a waste of system resources because processors that need to access the hard disk every time a service request is made and do not need to be characterized by hardware resources operate.

Second, system failures are likely to occur.

If the hard disk data is damaged due to unstable hardware, unstable power supply, or physical shock from the outside, the fault is fixed by the expert of the system operating system. It must be waiting and the maintenance costs are high.

Third, security is poor.

Firewalls need to be installed for security, but since the cost of installing the firewall is considerable, in reality, companies such as SMEs have a cost burden. As a result, most corporations operate servers without firewalls, so sensitive data can be lost by intruders who intrude from malicious sources for malicious purposes.

Fourth, the service use speed is slow.

Because the proxy / cache server acts as an outbound gateway within the enterprise, network bottlenecks often occur as the number of Internet users and the amount of data increases, thereby slowing down overall service usage.

Fifth, the boot time is long.

Since a conventional proxy / cache server is a server base environment, the time is long when the system is booted. In particular, the larger the capacity of the hard disk, the longer the integrity check time of the system, and if there is a problem with the integrity, downtime lasts for several tens of minutes, resulting in frequent downtimes, preventing normal service.

The present invention has been made to solve the above problems of the prior art, the object of the present invention is to reduce the overall traffic volume of the Internet and to reduce the response time for the Internet user can provide the information to the Internet user in a short time It is to provide a proxy / cache server with an embedded operating system.

Another object of the present invention is to reduce the overall traffic volume of the Internet and to reduce the response time for Internet users, so that the information can be provided to the Internet users in a short time, and the downtime is short, and an easy-to-recovery operation is possible. It is to provide a proxy / cache server with.

Another object of the present invention is to reduce the overall traffic volume of the Internet and to reduce the response time to the Internet user, to provide the information to the Internet user in a short time, the downtime is short and easy to recover from the failure, It is to provide a proxy / cache server with an embedded operating system with low maintenance cost.

Other objects, specific advantages, and novel features of the present invention will become more apparent from the following detailed description and the preferred embodiments associated with the accompanying drawings.

1 is a block diagram illustrating a service providing system using a conventional proxy / cache server.

2 is a flowchart illustrating a booting process of a service providing system using a conventional proxy / cache server.

3 is a block diagram of an internal and external network interface unit of a conventional proxy / cache server.

4 is a flowchart illustrating a service providing method of a service providing system using a conventional proxy / cache server.

5 is a block diagram showing an Internet service providing system using a proxy / cache server having an embedded operating system according to the present invention.

6 is a block diagram illustrating a structure of a proxy / cache server having an embedded operating system according to the present invention.

7 is a flowchart illustrating a booting process of a proxy / cache server having an embedded operating system according to the present invention.

8 is a block diagram of internal and external network interface units of a proxy / cache server having an embedded operating system according to the present invention.

9 is a flowchart illustrating a service providing method using a proxy / cache server having an embedded operating system according to the present invention.

<Short description of drawing symbols>

11, 12, 21, 22: Client 13, 23: Switching Hub

14, 24: proxy / cache server 15, 25: cache memory

16, 27: modem 17, 28: Internet network

18, 29, 30: external web server 26: router

The object of the present invention is a switching hub for connecting a plurality of clients, the plurality of clients to form a predetermined internal network, a proxy / cache server connected to the switching hub, the proxy / cache server and An internet including a cache memory connected to and storing predetermined data, a router connecting the internet network and the proxy / cache server through a dedicated line, and a modem connecting the proxy / cache server through a communication network connected to the internet network In the system for providing a service, the proxy / cache server is connected to the switching hub through a multichannel, and has a disk on memory storing an embedded operating system, and is connected to the switching hub to supply the multichannel. An internal network interface unit and an external network connected to the router and the modem. This is accomplished by a proxy / cache server having an embedded operating system that includes an interface portion.

In addition, the proxy / cache server includes a hardware layer implemented as a personal computer (PC) or a server-class computer, an operating system layer, a device driver layer for driving peripheral devices, and a protocol for communication connection between the client and the proxy / cache server. And a middleware layer (including TCP / IP, UDP, etc.) and an application layer such as proxy / cache server software operating on those layers.

It is also desirable for the proxy / cache server to boot using the journaling file system.

Hereinafter, a preferred embodiment of a proxy / cache server having an embedded operating system and an internet service providing system using the same according to the present invention will be described in detail with reference to the accompanying drawings.

5 is a block diagram showing an Internet service providing system using a proxy / cache server having an embedded operating system according to the present invention.

As shown, the Internet service providing system using a proxy / cache server having an embedded operating system according to the present invention, a plurality of clients (21, 22) using the service and the client (21, 22) by connecting a predetermined internal A switching hub 23 forming a network, an embedded operating system for a server, and a proxy / cache server 24 connected to the switching hub 23 through a multichannel C1, and a proxy / A cache memory 25 connected to the cache server 24 and storing predetermined data, a router 26 connecting the internet network 28 and the proxy / cache server 24 through a dedicated line C2, The Internet network 28 and the proxy / cache server 24 are connected through a communication network such as an asymmetric digital subscriber line (ADSL) / cable network / very high-speed digital subscriber line (VDSL). Modem 27 to connect, Via the Internet network 28 and a client outside the web server (29, 30) providing a service (21, 21).

Here, the modem 27 includes a VDSL / ADSL / cable modem.

The interval between the switching hub 23 and the proxy / cache server 24 constitutes a network with four ports of multichannels C1. The section between the proxy / cache server 24 and the internet network 28 is constructed with an external network line composed of a dedicated line and a communication network such as ADSL, cable, or VDSL.

6 is a block diagram illustrating a structure of a proxy / cache server having an embedded operating system according to the present invention.

As shown, a hardware layer L1 implemented as a personal computer (PC) or server-class computer, an operating system layer L2 formed on the hardware layer L1, and a device driver layer L3 for driving peripheral devices. And a middleware layer (L4) that contains protocols (TCP / IP, UDP, etc.) for communication connections between the client and the proxy / cache server, and applications such as proxy / cache server software operating on those layers. Layer L5. Here, various rules are applied to the application layer L5 in communication, and all data processing routines and security policies are contained.

In the present invention, the hardware may be a personal computer or a server base system.

The booting process of the proxy / cache server having the embedded operating system according to the present invention configured as described above will be described with reference to FIG. 7.

As shown in FIG. 7, when the power switch is pressed and the power is supplied (S31), the BIOS checks whether the hardware and the system are physically damaged (S32). Memory (using a disk on memory (DOM)) into a random access memory (RAM) (S33), and then loads the kernel to load the kernel image into the memory and decompresses the journaling file system Check the hardware and performs a kernel boot operation to recognize (S34). Next, all processors (network tasks, mouse usage, I / O functions, etc.) required by the operating system to execute its task are loaded into memory and executed (S35). RUNlevel is then performed, and the login is displayed on the screen by the run script. All subsequent work is done by the proxy / cache server application using middleware.

The operating system running on the proxy / cache server of the present invention is stored in a dome (DOM), which is a semiconductor memory, rather than being driven from a hard disk. In other words, the DOM stores data for the system to boot and is only used when the system boots or when settings are changed, and is not accessed after the system boots.

On the other hand, in the kernel loading and booting step S34, since the journaling file system is checked without checking the file system performed in the conventional system, the system booting is performed in a relatively short time.

Therefore, the service providing system according to the present invention has high stability and can be booted within a short time even when a system failure is caused by an intruder from the outside, and can be quickly restored and returned to its previous normal state.

Here, the journaling file system is a file system capable of backup and recovery. Since the contents of the journaling file are recorded before the index on the hard disk is updated, even if a power failure or other problem causes the index to fail, Allows the operating system to view the log, rebuild the index, and restore to its previous state. In short, the journaling file system can either commit changes or simply return the system to its previous state in a transactional manner, such as a relational database management system (RDBMS). Therefore, journaling file systems are more secure than commonly used file systems because they log changes made to disk.

Meanwhile, the network interface method of the proxy / cache server according to the present invention will be described with reference to the accompanying drawings.

8 is a diagram illustrating a network interface configuration of a proxy / cache server having an embedded operating system according to the present invention.

In the present invention, the switching hub 23 forming the internal network with the proxy / cache server 24 is connected to the multi-channel (C1) through the internal network interface (S41). Preferably, the multichannel consists of four channels (CH1, CH2, CH3, CH4). Here, the proxy / cache software bundles and processes the four channels into a single channel (S42). In short, the proxy / cache software allows the client to connect to the same IP address and simultaneously transmits data over four channels when transmitting data from the proxy / cache server to the client. Therefore, the client can receive the desired data in a short time, and even if the number of clients connected to use the information is high, each client can be provided with the service relatively quickly.

On the other hand, the external network such as the cable network (C3-1), ADSL network (C3-2), leased line network (C2) to form an external network with the proxy / cache server 24 is made of an external network interface unit. The first port PE1, the second port PE2, and the third port PE3 are connected to each other (S43). Accordingly, since the proxy / cache server 24 is further connected to the internet network 28 and the ADSL network or the cable network, which is relatively inexpensive, the proxy / cache server 24 may exchange data with the internet network with a relatively large bandwidth. In other words, the proxy / cache software communicates with an external web server because it is connected to a low-traffic line among the lines connected to the first to third ports for load balancing of the external network through the external network interface unit. Evenly handle traffic between client and external web server. For example, if an Internet user wants to download or upload data to or from a web server, select the line with the fastest download or upload speed to download the service through the selected line. Provide to Internet users.

The method of providing a service to a client by the service providing system using a proxy / cache server having an embedded operating system according to the present invention configured as described above is as follows.

9 is a flowchart illustrating a service providing method of a service providing system using a proxy / cache server having an embedded operating system according to the present invention.

First, when an Internet user of the internal network requests information on a site operated by an external web server by inputting a predetermined Internet address (URL) into a web browser installed on a personal computer (S51), The proxy / cacher application program obtains information of the Internet user (S52). From the obtained information, a packet including TCP, UDP, IP, and the like is analyzed (S53). As a result of analyzing the packet, it is determined whether or not the information requested by the Internet user is controlled according to the Internet user and the predetermined packet rule (S54), so that the unauthorized user or the information requested by the Internet user is registered on the harmful site or the block list. If the information is located at S55, a message informing that the user cannot access the site is transmitted to the Internet user (S55). As a result of packet analysis, if the Internet user does not need to control the information of the corresponding site, it is determined whether the corresponding information is in the cache memory (S56). If the requested information is in the cache memory, the information is transmitted to the Internet user (S57). If not, the traffic volume of two or more external networks is analyzed (S58). As a result of analyzing the traffic volume, the circuit having the smallest traffic volume, for example, the port PE1 is first selected and connected to the external web server through a predetermined transmission rule through the selected circuit (S59). Next, a circuit having a traffic volume next smaller than that of the already selected circuit PE1, for example, PE2, is selected and connected to the web server (S63). Next, request the information from the external web server (S60), after receiving the requested information, copy it and store it in the cache memory (S61), and at the same time the user to the Internet user who requested the information through the multi-channel It transmits to (S62). Therefore, the Internet user can obtain the information he wants in a relatively short time. On the other hand, the information stored in the cache memory is transferred directly from the cache memory to another Internet user when requested by another Internet user. The information stored in this way is stored and updated automatically up to 20 according to the request frequency, so that the Internet user can always obtain the information in a short time.

Until now, an embodiment in which the Internet user downloads the data from the cache memory and an external web server has been described. However, a person skilled in the art can perform the embodiment in which the user uploads the data to the external web server in the same manner. It will be easy to see.

In addition, although the embodiment of the present invention has specifically described the number of channels of the internal network interface unit and the number of ports of the external network interface unit, those skilled in the art can easily understand that each number does not limit the present invention as an embodiment of the present invention. There will be.

As described above, the proxy / cache server having an embedded operating system and the Internet service providing system using the same according to the present invention form a multi-channel section between the proxy / cache server and internal network components such as a switching hub. By configuring the section between the proxy / cache server and external network components, such as modems and routers, with transmission lines and ADSL or cable networks, service speeds can be improved, for example, without adding leased lines or installing additional systems. It is 30% more effective than the system.

In addition, the proxy / cache server having an embedded operating system according to the present invention and the Internet service providing system using the same are stored in a dome (DOM), which is a semiconductor memory, and are loaded and run in RAM. Not only has the system booted up faster, it also improves stability and security.

In addition, since the proxy / cache server and the Internet service providing system using the embedded operating system according to the present invention operate the proxy / cache server using the journaling file system, the boot speed from the point of failure Not only is it fast, it also has the effect of quickly recovering and returning to the previous state.

In addition, the proxy / cache server having an embedded operating system and the Internet service providing system using the same according to the present invention has the effect that the maintenance cost is low.

Although the present invention has been described in connection with the above-mentioned preferred embodiments, it is possible to make various modifications or variations without departing from the spirit and scope of the invention. Therefore, the appended utility model registration claims will include any modifications or variations belonging to the subject matter of the present invention.

Claims (6)

A switching hub 23 connecting a plurality of clients 21 and 22 to the plurality of clients 21 and 22 to form a predetermined internal network, and a proxy / cache server connected to the switching hub 23. (24), a cache memory (25) connected to the proxy / cache server (24) and storing predetermined data, and an internet network (28) and the proxy / cache server (24) through a dedicated line (C2). In the Internet service providing system comprising a router 26 for connecting and a modem 27 for connecting the proxy / cache server 24 through a communication network C3 connected to the internet network 28. The proxy / cache server 24 is connected to the switching hub 23 through a multi-channel C1, a disk on memory for storing an embedded operating system, and the switching hub 23. And an internal network interface unit for supplying the multi-channel (C1), and an external network interface unit for connecting the router (26) and the modem (27). delete delete delete The method of claim 1, The proxy / cache server 24 may include a hardware layer L1 implemented as a personal computer (PC) or a server-class computer, an operating system layer L2, a device driver layer L3 for driving a peripheral device, and the client Middleware layer (L4) containing protocols (TCP / IP, UDP, etc.) for the communication connection between the server and the proxy / cache server, and an application layer such as proxy / cache server software operating on the layers ( L5) proxy / cache server having an embedded operating system, characterized in that it comprises a. The method according to claim 1 or 5, The proxy / cache server (24) is a proxy / cache server with an embedded operating system, characterized in that booting using a journaling file system.