TWI231127B - Network system, method and protocols for hierarchical service and content distribution via directory enabled network - Google Patents

Abstract

A network system is provided for management of hierarchical service and content distribution via a directory enabled network to improve performance of the content delivery network with a hierarchical service network infrastructure design. In accordance with the network system, a method and protocols are provided as to how to design the network of multiple data centers running existing Internet protocol and user's proprietary protocols, allowing a user to obtain various Interact services, especially the content delivery service, in a scalable and fault tolerant way. The network system is constructed into 4 layers, each layer is represented and managed by a service manager with back up mirrored managers. The layer 4 service manager is responsible for management of multiple CDN (content delivery network). The layer 3 service manager is responsible for management of one CDN network that has multiple data centers. The layer 2 service manager is responsible for management of one data center that has multiple server farms or service engine farms. The layer 1 service manager is responsible for all servers in a server farm. Each server of the server farm can be connected by LAN Ethernet Switch Network that supports the layer 2 multicast operations or by Infiniband switch which is the new industry I/O specification for server design.

Description

1231127: 93. •: kk 2 九 、 发 萌 IT 萌 τ [Technical Field to which the Invention belongs] The present invention relates to a method and system for exchanging service routing information, and more particularly, it relates to A method and system for managing hierachical service and content distribution (content distrubution) through a directory enabled network through a directory enabled network through borrowing a hierarchical service, · 罔Lu Zhi's basic excuse is to improve the performance of the content delivery network (conntent delivery network). [Previous Technology] Web pages have become one of the most effective and important media for B2B (business-to-business), B2C (business-to-consumer), and C2C (consumer-to-consumer) communication. The network architecture is based on a centralized server that delivers content or services to all points on the Internet. The surge in web traffic has therefore caused congestion in many web servers, as well as network traffic. Therefore, the content delivery network is designed to require a majority of cooperation. Content_ Perceived Network Devices, where these network devices work with each other, so that the content that is closer to the user is dispersed, and under the request, find the closest The location of the user's content. Internet routing protocols such as the Border Gateway Protocol (BGP) are designed to exchange large Internet routes between routers. The boundary gateway protocol for the external routing specification is a certain direction for the connection and is implemented on top of the transmission control protocol. It will maintain adjacent connections through keep-alive (keei> aliveMq messages) and make them consistent through the life of the connection. The correct routing 5 91743 fixes this I # 'replacement page Ί τ, :) J Day 1231127 Information synchronization ^ 1 ^^ The channel protocol will not exchange information in the web server center = network. Therefore, it would be useful to have a service (with lightweight directory access protocol = directory format) routing protocol to exchange services in a hierarchical way for distributed management of services and content via a directory-enabled network, so that Improve the performance of content delivery networks and service provisioning and management. [Summary of the Invention] The purpose of this description is to provide a novel network system that is hierarchical in nature and can be used to improve the performance of content delivery networks through the following architecture design of hierarchical service networks. The other purpose of the present invention is to provide a method and agreement so that when = material is available, mobile notifications can be sent to the client from the ship's jumper to reverse the quality content. Based on the foregoing and other objectives, the present invention proposes a new network system and method, which

Empower the network for hierarchical services and decentralized management of content. The development and network system includes: X The feeder exchanges service information with the level ^ service manager 〇evellservicemana㈣ through our exclusive agreement, and the exclusive agreement has also been proposed to obtain patent use rights. In order to be able to manage such an adjustable network, some concepts from the Internet $ routing will be applied. For example, BGp's Internet routing protocol is designed to exchange / exchange large Internet routes with their neighbors. The agreement allows for the exchange of funds between service managers in a hierarchical tree structure to assist in providing better and adjustable service provision and management. The information exchange using this agreement is defined as the very same 91743 amendment 6 1231127 very genetic directory information schema format, which became LDAP (Lightweight Directory Access Protocol) , Light weight directory acess protocol). The protocol is named DGP (directory gateway protocol), which is a directory information routing protocol. The directory gateway protocol is similar to the external routing protocol border gateway protocol (BGP), except that directory information is exchanged between the DGP parent and child service administrators. On the other hand, BGP and its neighbors exchange Internet Protocol (IP) routing information. Similar to BGP, the directory gateway protocol is link-oriented and implemented at the upper layer of TCP. It will maintain adjacent links by keeping unblocked messages and synchronize consistent directory information through the vitality of the links. . In the load balancing among multiple data centers, the method of proximity calculation and data center load factor is proposed, and the best data center is selected by DNS to serve as the DNS response to users. In a local area network (LAN) environment, a reliable multicast transport protocol is provided in order to update information to service devices at the same time and to improve performance. Implementing a reliable Multicast Directory Update Protocol on top of this reliable Multicast Transport Protocol also provides this reliable Multicast Directory Update Protocol to improve the operation similar to standard LDAP Performance of multiple broadcasts with directory information. In order to manage this service network more efficiently, a reliable Multicast Management Protocol (Reliable Multicast Management Protocol) is also proposed in order to transmit management information to the service device at the same time to improve the performance of 7 9Π43 amendment 1231127 and reduce management operations the cost of. In order to get the content closer to the user, the use of a cache is helpful 'but the content of the cache must remain the same as the original feeder. A method of mismatching the caches transmitted via DGP was invented to help maintain the cache freshness of this content delivery network. In order to manage the network more efficiently, the dynamic disco very method of Service Engines, Level 1 Service Manager and Level 2 Service Manager It will be provided by opaque link state packets filled with service information via LAN multicast and link state routing protocols. In order to support the content delivery, the content delivery meets the quality requirements of, for example, streaming media content, and a method of delivering content via a mobile announcement, jumping from the service engine to a client with a reversal, is proposed, and This method works regardless of whether there are other standard LAN or IP traffic engineering related protocols. [Embodiment] Network System_ An embodiment of the network system layer of the present invention is described with reference to FIG. 1, FIG. 2 a, and FIG. 2 b. FIG. 1 is a diagram illustrating content peers for a multiple content delivery network architecture (CDN) network according to the system of the present invention. This hierarchical directory enabled network provides secure content information as well as other forms of services. Ill click here. The service web page and stream content decentralized service, 8 9] 743 amended 1231127 web page and stream content hosting service, Internet Protocol Encryption Protocol (IPSEC) virtual private network (VPN) service, Managed firewall services and any other new Internet Protocol services in the future. Hierarchical Scalable Integrated Service Network

Integrated Service Networks (HSTSN) components a. Device Integrated Service Switch (ISS): Internet Protocol (IP) switch, Internet Protocol traffic based on service and mobile specifications. Service Engine (SE): A service system (or with special hardware attached) that handles Hyper File Transfer Protocol (HTTP), cache memory, Internet Protocol encryption protocols, firewalls, or Agents, etc. Service Manager (SM): A system designed to perform as a management agent and also as a link control protocol (LDAP) server for link control protocol search services, and also with The system's parent service administrator and child service administrator implement a directory gateway agreement to exchange directory information. Link control protocol description language: The definition of directory information, which is exchanged by the service management program and searched by the link control protocol client. Simple Network Management Protocol (SNMP) · 9 91743 Amendment 1231127 〇 K'1-- .. Definition of Management Information ’is used between SNMP network administrators and agents. Protocols Standard protocols Existing routing protocols (Open Shortest Path First Protocol (0SPF), Border Gateway Protocol (BGP)) are implemented on the ISS to perform internal operations with other routers in this network. Each server executes the link control protocol as a client; the service manager also executes > as a key control protocol to provide the services requested by the service engine key control protocol search. Invention Agreement Service Information Agreement [Related applications are being filed separately] Refer to Figure 5 (a), which is a local area network 9 between ISS19, Service Engine 23, and Tier 1 Service Manager 1. Infinite Band 24 (a new input / output specification for the server server) is implemented in an environment such that 1 · register / deregister / update services and service attributes 2 · service control announcement_service engine congestion, redirection, etc. can be Supports an unlimited number of service engines 23 (that is, it can have extremely high adjustability with multiple boxes). Service control announcements can be dynamically load-balanced between service engines U because the ISS 19 will transmit messages based on these announcements to available (less congested) service engines 23. The maintenance of communication between lss 19 and the service administrator, such as the Tier 1 service administrator in the figure, can assist in checking the faulty device, and ISS 19 can be removed from its list of available service engines. 9Π43 Amendment 1231127 Flow advertisement protocol [Relevant applications under review are applied separately] Generated by the use of service engine 23 for ISS 19 (application-driven flow or conversation layer) 1. Established in ISS 19 To allow flow exchange 2. This flow contains its flow attributes; one of the attributes is quality of service (QoS) 'and other flow attributes are equally possible. The flow attribute of service quality can enforce the requirements for the content quality of the data stream. The flow will be mapped to the external network to existing or future standards by ISS 19, such as MPLS, DiffServ, 802.1p, cable modem SID. Assigned Numbers Authority protocol [Relevant applications under review are filed separately] This agreement controls any kind of assignment to this subnet or local area network 9 or unlimited band 24 if it is needed on a global basis. Value. These values include Internet Protocol address pools, MPLS label ranges, global interface values, hyper-file transfer protocol cookies, and so on. In each subnet, a designed service administrator will be selected (on behalf of the service engine farm including ISS 19). The service type will be expressed in the form of a packet conformance, so that different kinds of service engines 23 can be mixed in the same subnet or local network 9 ', and all different kinds of service engines 23 can use the same service Administrator to represent. Directory Gateway Protocol (DGP) refers to Figure 1 and Figures 2a and 2b, which show the content peers for multiple content delivery networks, and Figures 2a and 2b show multiple π 9] 743 amendment 1231127 _?.,. ° each,. the same way, the directory gateway protocol is defined as the directory information routing protocol. Mu Yudou, Dad. . The record-breaking robbery agreement uses a similar gateway from the external routing agreement border gateway agreement ^ β 1 „Μ ^, Caution” except that the directory information is in the directory gateway

The parent agreement and the parent relationship of the state agreement y M ^ ^ Βθ 父, instead of switching between adjacent shoulders, borders, and borders of the gateway agreement. Similar to the boundary closer agreement, the j-gate gateway state protocol is link-oriented and implemented at the upper layer of the transmission control protocol, and will maintain adjacent links through messages that remain unblocked, and during the life of the link, Synchronize consistent directory information. However, if the parent and child service managers try to start the directory server protocol connection at the same time,-4 directory explanation || The protocol link is started from the parent service manager to the child service manager 'to avoid any connection conflict. To avoid any transmission loops, connections between service administrators at the same level are not allowed. Although it is possible for multiple backup parent and child service administrators to link to the same child service administrator for duplicate reasons, to provide the child service administrator lightweight directory access agreement search service, only the parent service management Only members and children of the service management tribute link are allowed. Tier 1 service manager 1 (representing a service subnet) will establish a directory profiler connection with its parent service manager (tier 2 service management M 2). Normally Tier 2 Service Manager 2 will perform on behalf of the entire data center. Tier 2 service manager 2 will also establish a directory profiler protocol link with its parent service manager (tier 3 service manager 3). Normally, the service administrator of the origin server farm will also establish a directory interpreter protocol link with its parent service administrator (Tier 2 or Tier 3 Service Manager 2 or 3). 9Π43 Amendment 12 1231127 f I Replacement sheet 'Month ^ said that the level 3 service administrator 3 usually executes as the domain name feeder 10, and the service administrator directs the user's f request to the area load balancer. From time to time center, 6. The decision to redirect the domain name system can be based on the situation of the service load attribute, and the service load attribute can be updated by the service data center 6 through the incremental update of the directory server protocol, and other attributes near the user can be, for example, Based on the domain name service redirection. '—In Figure 1, it is shown that the layer 3 service manager 3 is responsible for the management of a cdn5' The CDN 5 has multiple data centers 6 (as shown in Figure 2a). Tier 4 service management Shell 4 is responsible for the management of several CDNs. Although in accordance with the directory data transmission strategy, usually the layer 4 service manager 4 stores cdn5'2 content location data, and the CDN 5 layer 3 service manager 3 stores only the managed CDN5 content location data. In FIG. 2a, it is shown that the content management data of the data center 6 is stored in the hierarchical 3 service manager 3, and the inner position > of the data center 6 managed by the hierarchical 2 service manager 2 is stored. Furthermore, the data passing through the data center 6 can pass through the ipsec tunnel 22 to ensure privacy and security, or even form a VPN in the data center 6. With reference to FIG. 3, the tiers 1 and 2 service managers 1 and 2 and the cache proxy server 6 in the data center 6 of the system according to the present invention are described, in which the tier 1 service manager 1 of the cache server farm 7 Only store (cache) the content location data of the cache proxy server 16. The initial directory profiler protocol link will exchange directory information based on individual other directory information transmission principles; after the initial exchange, every 91743 amendments 13 1231127 service administrators will only incrementally add Or abandon) its directory information service and service attributes, content and content attributes, etc., its service attribute is the load factor of the service field (reaction-two other: where-the content attribute is the content including cached content location Content location. The format of the directory profiler protocol packet is open, lightweight directory access protocol (LDAP) addition, LDAPJ removal, LDAp, multiple changes and one addition, LDAp modification-replacement, LDAPj modification_deletion, notification, and security. ㈣t 'Treat content changes as content attributes (content time) changes for the content' The content changes will be transmitted to the cache proxy server 16 with cached content (see the section on cached content expiration order for details For content that changes frequently, (similar to the boundary gateway agreement), the directory gateway protocol supports directory information damping, which is System often changes the transmission of directory poor information. Similar to the border gateway agreement, the directory gateway agreement also supports political-based transmission between its parent and child service managers. The best way is to transmit The collection policy was previously applied to collect directory information. Similarly to the boundary gateway protocol, the transmission control protocol mini-disc 5 can also be used for authentication. The calculation of the proximity is as described previously. The service load attributes updated by the data center 6 are used together to enable the DNS server 10 to indicate the user's needs to the best service data center as a regional load balance. The destination of each Internet protocol (IP routing, Address and mask) will be assigned the (x, y) attribute 'where X stands for longitude (between _18〇 and + 18〇, but · 18〇 and +180 are actually the same location, because the earth Is round), and y 14 91743 amendment 1231127 represents the latitude of the earth (between -90 and +90), where the destination of this IP can be physically located. Assume that the user's source address and some One The longest prefix of the Internet protocol destination with the (xl, yl) attribute matches, and the attribute of the Internet protocol address prefix for data center 6 is (X2, y2). If | x 卜 x2 | < = 180, then the distance between the user and the data center is ((xl-x2) 2 + 〇; lj; 2) 2), / 2 If | x and χ2 and 180 'then between the user and the data center The distance of ((360- | xl-χ2 |) 2 +0; 1-fire2) 2) 1/2 and (x'y) can be recommended to the Internet Engineering Task Force as a border gateway Extension of the router contract attributes. Reliable Multicast Transport Protocol (Reliable Multicast Transport Protocol) Refer to Figure 4 for directory information multicast update in the service management field and Figure 5 for "Reliable Multicast Transport Protocol sequence" in order to update the information to the multicast at the same time. Service devices in the network, and to improve performance, the reliable multicast transmission protocol is used for this purpose. This protocol is similar to the transmission control protocol, but it has a two-way (send and reply handshake) function instead of a three-way handshake defined between the sender 40 and all receivers ^. After that, the service manager will be responsible for specifying the size of the window (existing in the packet) so that the sender 40 can send the message without the green check. The size of the window is one of the service attributes of the individual service Bow 1 registered to the service administrator. Service administrator complies with 9Π43 to revise 15 1231127 the lower value of the service size of the window size registered by each receiver. At the end of each window, the service administrator will also be responsible for confirming the reception on behalf of Γ: 二:! Recipient 41. It's better; the formula is to wait for a short period of silence before sending Erribe to confirm the reception signal: (can be set to a configurable value). If any non-programmed packet is detected, it means that there is no packet at the given time and the waiting time is too long and stopped. The receiver 41 should send and resend from the starting program value (for Windows). request. The sender 40 can choose to resend the program value and resend it, or interrupt the link and :: restart. Unless the connection is broken, the receiver receives the packet. The final packet should be acknowledged not only by the service but also by all the recipients 41, so that the instructions are linked ... If the service officer Ligong detects any packets that the recipient is not on hold, then the service administrator will ask ^ to send again The __ and __ to the receiver 41 (Unicast packet if the retransmission has been attempted more than three times, the device will be considered dead and the service administrator will be removed from the service engine list. If there is only one If the packet is to be transmitted, this protocol becomes a reliable data segment protocol (liable data gram _ocol). Define the window size as an unprocessed packet without confirmation. Indeed, both Re and Redevelopment are multi-cast packets that allow service administrators to monitor. Reliable Multicast Directory Update Protocol As shown in Figure 6, it is a reliable multicast directory update protocol. It is implemented on top of the retransmission carrier agreement. This agreement is similar to the directory access agreement at the level of the Transmission Control 9Π43 Amendment 2 1231127 protocol, except that the transport layer is a reliable multicast transmission protocol. In Figure 7, LDAP—Multiple Transfer_ operation is one of the following operations. LDAP—Add (LDAP—ADD) LDAP—Delete (LDAP_DELETE) LDAP—Modify_Add (LDAP—MODIFY—ADD) LDAP—Modify—Replace (LDAP_MODIFY_REPLACE) LDAP_MODIFY_DELETE Reliable Multicast Management Protocol Reference Figure 7 shows the sequence of a reliable multicast management protocol. The sequence of the reliable multicast management protocol is Implemented on top of a reliable multicast transmission protocol. Because there is only one packet to send, this agreement will become a reliable multicast segment agreement. This protocol is similar to the Simple Network Management Protocol (SNmP) implemented on Ethernet, except that it has a transport layer to provide multiple broadcast and reliability services. In Figure 7, the SNMP_Multiple Transmission_ operation is one of the following operations: SNMP-Get (SNMP-GET) SNMP-Get Next (SNMP-GETNEXT) SNMP-Set (SNMP-SET) Hierarchical Management Information And management methods Management agents are formed as part of the service manager. For policy-based service management, management information is determined at different levels 17 91743 Amendment 1231127

It is from one class to another. For example, the value of a web page hit can be recorded with a counter on each cached service engine, or it can be recorded with a full-counter across the entire level 1 service engine farm, or a full-counter can be used in the entire data center 6 recording. As far as configuration management information is concerned, the same definition is used for configurations on different levels. For example, the default routing configuration is only used for the same subnet, while the unique name server 10 can be used throughout the data center6. Tier 1 service manager 1 is responsible for multicasting the default routing configuration to the entire subnet, while Tier 2 service manager 2 sends the unique name (DNS) server configuration containing its data center hierarchical configuration to Tier 1 Service Manager 1. Then, Tier 1 Service Manager 1 needs to multicast its components in its subnet. The lower-level configuration or policy cannot contradict the higher-level policies; if they do, the higher-level policies should take precedence over the lower-level policies.

Directory description language and SNMP MIB. Several directory information description languages and SNMP MIBs need to be defined in order to support Hierarchical Scalable Integrated Service Networks (HSISN). Web Site object Web Content object object) Service Engine object Integrated Service Switch object User object 18 9] 743 amendments 1231127 and other objects take the following consistent resource locator as an example website object ( Original or cached website) Original website DN (Distinguished Name) ·· http, vision, yahoo, com Attributes: Service website Internet Protocol (IP) address: Cached service website DN (Distinguished Name) ) ·· subnet, Datacenter2, CDN3 Attributes: Internet Protocol (IP) address of the service website: Creation of a new entry for the website object The original website will send a directory gateway protocol (DGP) Lightweight Directory Access Protocol_Additional DN: http.vision.yahoo.com to tier 3 service administrator 3 (also one DNS servers 10) in order to add a new entry D. Modification of website object entry According to service level agreement, level 3 service administrator 3 will send DGP lightweight directory access protocol for service website address_modify_add entry attribute of website object, these Internet Protocol (IP) bits The address will be appended to the DNS entry list of vision. Yahoo.com. The Yahoo ’s DNS server that is responsible for vision.yahoo.com should attribute the DNS requests used by vision.yahoo.com to the DNS in Tier 3 Service Manager 3. The DNS of the Tier 3 service administrator 3 will respond to the IP address of the service website with the lowest service standard to the user, or according to other policies. A cache site selected based on the best response from the cache site to the user. A Yahoo site based on a financial page with video as an example:

The Internet server's DNS server will be referenced to Yahoo's DNS server and used at vision.yahoo.com. Yahoo's DNS server will refer to the tier 3 service administrator of the content decentralized service provider. Each data center 6 may have one or more service sites, and each service site may have a virtual IP address. Server. If you find visi〇n.yah〇 (Many of Kconi's cache service sites are available (for example, one of them is 216.136.131.74 and the other is 216.136 · 13 1.99), and all of these sites are designated for use To serve vision.yahoo.com. Tier 3 service administrator 3's DNS will have multiple entries for vision.yahoo.com. It will select one of the sites as a policy-based DNS response (weighted round-robin or from these sites to User's service scale). Assume that DNS selects 216.136.131.74 to respond to users. The user sends an http request such as Service metric. The service scale from user 1 to website 1 is the current average server service response time + weighted weight by website 1. * The current 20 91743 revised version 1231127 ancestor proximity from user one to website one. 忒 Weighting is based on policy. Website one uses the formula described above to calculate the current proximity. Hierarchy 〖Service administrator 1 of the The website 1 will receive the response time of each server in the keep-alive message from the server through the service engine 23, so as to The server of the load factor of this website calculates the current average service response time. 谷物 Grain pieces on the site (in the original or quick access site) Distinguished name (DN): fv.html, ie, web, http, vision, yahoo , com attribute: Original content location: The Internet Protocol (IP) address of the original server depends on the inner valley location: the DN of the cache service website one, which has the number of cache service engines for this content in website one, The DN of the cache service site two 'has the number of cache service engines for this content in site two, the DN of the cache service site thirty-one, the number of cache service engines for this content in site 31, D] Sl of the cache service website 41 .... The media access control (MAC) address of the cached content service engine 23 in the tier 1 service manager 1 is: service engine 1 MAC (applicable to tier 1 services only) Admin 1), Service Engine 2] V1AC (only applicable to Tier 1 Service Admin 1), the number of cache service engines with the cached content, the date and time when the content was last modified: the date and time when the content expired: Service engine Document 21 91743 amendment 1231127; DN: Internet Protocol (IP) address, subnet one, data center two, content delivery network architecture (CDN) three attributes: Service form: service engine name: service engine subnet Road Mask: Service Engine Media Access Control (MAC) Address: Service Engine Security Policy: If it is a different data center, use the Secure Socket Layer Service Manager IP Address: Service Engine Certificate: Integrated Service Exchange Object DN: IP address, subnet one, data center two, and CDN three attributes on the server farm interface: Exchange form: Exchange IP address: Exchange MAC address: Service administrator IP address: Exchange certificate: User object DN : Name, Organization, Country Attribute: Mailing Address: 22 91743

Email address: User certificate: Account record: Creation and modification of new entry of website content object

According to the service agreement, the original website will send DGPLDAPJMODIFY ADD DN · fv.html ’ie, web, http, vision.yahoo.com to the level 3 service administrator. According to another patent we have invented, this virtual IP address integration service parent switch will direct the request to a less congested caching service engine, which is what Engine 1 chose. If the content is not in the cache engine, the integration service switch of this virtual IP address will send the LDAP search request to its level 丨 Service Manager 1 ^ If the Level 1 Service Manager 1 does not have the content, it will Refers to its tier 2 service administrator 2. If the Tier 2 Service Manager 2 also does not have the content, it refers to its Tier 3 Service Manager 3 ^ and the Tier 3 Service Manager 3 will reply to the attributes of the original server IP address to indicate whether it can be obtained quickly, and Reply to other content attributes. If the requested content information cannot be obtained quickly, the cache engine will redirect the user to the original server using http. If the requested content information is cacheable content, then cache = engine one will start a new http conversation layer on behalf of the user to the original server state. And if "cacheable:" is also stated in the http response from the original server, then it will cache the content. The real-time streaming protocol may also support the redirection message, but other existing application protocols may not always support the redirection message. Once the content is cached 'it will be lightweight directory access association 91743 revision 23 1231127 I month F: [j 定 （LDAP)] T ^ T ^ & D7irtSi ·· fv.html, ie, web, http, vision.yahoo.com's object to level 1 service manager 1. If the object is not found in the Tier 1 service administrator, then add the DN, fv.html, ie, web, http, vision. Yahoo.com (the service engine's DN) along with its own cached content location attribute. . If the object is found in the Level 1 Service Manager 1, then the object will be modified and then added with the attributes of the new cache content location. Tier 1 service manager 1 will then perform DGp LDAP join or DGP LDAP—modify—join DN: fv.html. Ϊρ ¥], 丨 〇] 1. 1100, (; 0111. to tier 2 service manager 2. Tier 2 service manager 2 will then perform DGPLDAP—join or DGPLDAp-modify-join DNlfv > html? Ie, web, http, visiomval ^^^ to level 3 service manager 3. The update of the cache location directory information update is triggered Update operation, which should be much faster than the periodic synchronization process used in the existing replication process between LDAP servers. Content retrieval from the nearest location (original or cached) comes from a nearby fast The retrieval of the service engine is managed by the same stratum in the same lan9! Service administrator! If there is a request for a document sent by another user, and the http request is transmitted by the integrated service exchange to the server Second, and the service engine two is managed under the same layer 1 service management s 1 as the service engine one (also as a Lightweight Directory Access Protocol (LDAP) server). When the service engine two does not have the content From Hierarchy] Service manager 1 lightweight directory access protocol wins., # 仔仔 取 协 疋-Search brother, level ^ 1 service management shell 1 will reply to its attributes and reply as Λ within six as the inside today express The location-based service is based on 91743 revision 24 1231127. Engine one. Because it is a fast-acquired content, the service engine two will start a new http conversation layer to service engine one on behalf of the user, rather than the original server. And in addition to responding to its users, it will also cache the content. Once the content is cached, the service engine 2 will add LDAP- to the same tier 1 service manager 1 (also as an LDAP server if the The portal already exists, and the service engine 2 adds LDAP one to the other to add another cached location (itself) to the content attribute. Retrieval from a nearby website is the same used by the entire data center Managed by service administrator 2 of tier 2, if another user sends an http request to the second service website, and the hUp request is transmitted to the service guide by the integrated service exchange of the 216 · 136 · 131 · 99 service website , Eleven. When the service engine without the content thirty-one from its level, service officer 1 LDAP—search, and the level] service manager i does not have the inner valley, and then refers to the level 2 service manager 2. Tier 2 service officer 2 will respond to the cached 216136131 · 74 website with the attribute of the number of service engines for the content. If two or more websites contain the content, then there are more The content of the service engine's website will be selected. The service engine 31 will then start a new http conversation layer on behalf of the user to 216 · 136 · 131 · 74 instead of the original server. In addition to responding to its users, the service engine 31 will also cache content. -Once the content is quickly obtained, the service engine 31 adds the lightweight directory access protocol (LDAP) to its hierarchy] service manager (also serves as the LDAP server). If the population does not exist, Hierarchy Service Management 9Π43 amends this 25 1231127 ι 1 member 1 stomach together with its own cached content location (media access control (MAC) address) attributes, plus a web httn and service engine Thirty-one's Tier 1 service management Bay 1 will also directory directory gateway agreement (DGP) LDAP MADN: fv.htm], ie, w £ b, http ,, visi, fl, niyalioo, co〇3LjL Tier 2 service management Member 2. If an entry is found, Tier 2 Service Manager 2 will modify it to attach another cached location (itself) to the content attribute and increment the number of sites that own the content. The search performed by the neighboring data center is managed by the same layer 3 service manager 3 used by the entire cdn5 (Content Delivery Network). If a second service website is set up in another data center, and if the data center does not yet have such a cached inner valley, then an LDAP search will eventually refer to the level 3 service administrator 3 to find the cached Data center location. If the neighboring data center 6 has the cached content, the http proxy will represent the user from the cache service engine 23 of a data center 6 and start to its neighboring data center instead of the original server. In case several data centers 6 have the cached content, then the number of cache service engines 23 (located in the data center 6) owning the cached content determines the preference setting. The service engine 23 can dynamically discover the ldap server it refers to, and the reference LDAP server is its hierarchy [service manager]. Depending on whether or not a link-like evil routing protocol (such as the Open Shortest Path First protocol) is being implemented, the Hierarchy service manager may or may not need a static configuration to find its Hierarchy 2 service manager 2. If even the 91743 amendment 26 1231127 9¾ 3: Q 9. The knot-state routing protocol is being implemented, then opaque link-state packets can be used to carry service administrator information and be used to flood the routing domain. LDAP search results are also affected by policy configuration. It is also possible to add policy management related to content attributes such as agent mushrooms or redirects. If Uchiya > δίΐ can cache payment, you can cache life time and so on. The cached content is invalid. When the original server modifies the content of ie, web, http vision y ^ tuio'com, it will modify and delete LDAP to remove all cached content from the tier 3 service administrator 3. position. Otherwise, it can be used to guide the scheduled content update, or to change the expiration date attribute of the content through DGp to perform the update action. The tier 3 service manager 3 then modifies and deletes LDAP to remove all cached content locations from the tier 2 service manager 2 it manages, or changes the expiration date. Then the level 2 service manager 2 removes all cached content locations or changes the expiration date from the level 1 service manager 1 managed by LDAP_MODIFY_DELETE '. And Tier 1 Service Manager 1 will notify (multicast) all of its cache service engines to remove cached content from their storage areas. When the content has been scheduled and changed by the original server, the original server status will also send LDAP-modify-replace to modify the date and time attributes of the content in the layer 3 service manager 3, and then It is transmitted to the lower-level service administrator and the cache service engine 23. Based on the last modified date and time, the server decides when to discard the old content. 9Π43 Revision 27 1231127 Discard 0

In a service engine (LDAP client) in a local network environment where a layer 1 service administrator and a layer 2 service administrator dynamically discover K2 (layer 2), the retransmission of 帛 2 layer township can be given to all services 5 丨 The engine passes the service information to each level 1 server manager. Define the well-known Ethernet Multicast URL for Tier / Service Managers (primary and backup Tier 1 Service Managers). . In the field of link-state routing, with all layer 1 service managers 1 and layer 2 service managers 2, the opaque link-state packet stream will be used to transport the server and it in a region or an autonomous system. Services provided. The white layer 2 service administrator 2 should always flow to the entire autonomous system. First, if the autonomous system has only one layer 2 service administrator 2, then the opaque connection status of the layer 1 service administrator] The packet should flow to the entire autonomous system. If each area has a P white layer 2 service officer 2, then the opaque link state packets through the layer 1 service manager 1 should only flow to that area. Although DGP links to other service managers of the same level are not allowed, before referring to the service manager 3 of level 3 for Japan, the service manager 2 of level 2 visits to refer to the service manager of level 2 first. More than one autonomous system can use Internet Protocol (IP) Multicast to relay services in the IP Multicast tree between Tier 2, Tier 3, or Tier 4 service managers 2, 3, or •. Static configuration can be used to transfer, find, and update services between service administrators. 9) 743 revision 28

1231127 By hopping: ¾¾Transporting animals—rii By skipping, from the cache service engine to the quality content with the reversed client, the IP streaming hopping flow notification protocol is based on pattern-matching rules Come to describe. After checking or initiating the authentication and account number, the mobile notification will start from the cache service engine 23 and reach its upstream integrated service exchange 19, and if it supports the mobile notification protocol, the integrated service exchange 19 will continue to notify the The integrated service exchange 19 that flows to its upstream neighbors, and jumps to end users. However, the use of f by the terminal need not be included in the mobile notification agreement. Thousands—If the flow notification protocol is not supported, each hop will map the flow and flow attributes to its (possibly not the same) upstream traffic characteristics through static configuration or signal protocols. For example, IP flows can be mapped to non- Isochronous transmission mode (ATM) switched virtual circuit (svc) or permanent virtual circuit (pvc), ATM svc or P VC can also be mapped to Internet protocol flows through this hop flow notification. If IPMPLS is also available, the IP flow announcement can be mapped to M p L s via the = MPS signal agreement. If the upstream hop does not branch off any mobile signal, the mobile announcement will stop. As long as flows can be mapped and defined, mobile exchanges need to include every hop, and they should try to include all the networks from level 2 to level 7: pieces. If only traffic is defined, then the downstream hop should still be Θ4 to map the appropriate traffic category to the upstream. Quality service m2 can map any useful part to the upstream network such as Diffserv, cable modem and 8⑴p. Being connected. Or in the case of interruption in the flow path, upstream 9] 743 amendment 29 1231127 Lu Zheng replaced page fn day i Jumping tank should interrupt by sending a flow abandonment notice to its upstream upstream point This flow 'is also transmitted to the end user. On the other hand, the downstream hop should initiate another flow announcement to other available upstream hops and pass it further to the end user 'to re-establish the flow. If there is no jumping jump 1 that will receive X the flow, then the exchange should interrupt the flow, and the downstream jump should be stopped (reversed) by IL, and the downstream jump should find other available upstream jumps. So that the attempt is retransmitted to the end user. If the upstream jump is no longer available, the flow stop (reverse) should continue to be notified to its downstream jump until a usable swap hit is found 'or it will return to Abandon the mobile service engine 23. Virtual private network (vpn) with PKI For non-content related service engines, such as JPSEC engine, VPNs with PKI can use the same directory to enable the network. VPN with ρκι It can be referenced to its hierarchy! The service administrator j searches for certificates and the like. It also refers to the level 2 and level 3 service administrators 2 and 3 for hierarchical user and account management. [Schematic description] ® in In view of the following detailed description of the accompanying drawings, the above and other objects and advantages of the present invention will be apparent. Herein, the reference text is all cited to similar parts. Among them: Fig. 1 shows a system according to the present invention, and content peering for multiple CDN networks; Fig. 2a shows a multiple data centers of the system according to the present invention. Integrated Service Network (Integrated Service 30 91743 Amendment 1231127

(Network) diagram; FIG. 2b is a diagram showing another integrated service network of multiple data centers in the system according to the present invention; FIG. 3 is a Service Manager in the data center of the system according to the present invention And Caching Proxy Server Farm®; Figure 4 shows a Directory Information Multicast Update in the service manager farm of the system according to the present invention; Figure 5 (a) FIG. 5 (b) is a diagram of a local network (LAN) in an integrated service in a system according to the present invention; FIG. 5 (b) is a diagram of a reliable multicast transport protocol sequence in the system and method according to the present invention. Sequence diagram; FIG. 6 is a sequence diagram showing the reliable Multicast Directory Update Protocol Sequence in the system and method according to the present invention; FIG. 7 is a sequence diagram showing Reliable Multicast Directory Update Protocol Sequence; Reliable Multicast Management Protocol Sequence in system and method Flowchart. [Description of main component symbols] 1 Tier 1 service manager 2 Tier 2 service manager 3 Tier 3 service manager 31 91743 Correction book 1231127 appearance. Q Γ 4 Tier 4 service manager 5 Content delivery network 6 Data center 7 Cache Server Farm 8 Lightweight Directory Access Protocol (LDAP) 9 Local Area Network (LAN) 1 Domain Name System (DNS) 11 Original Server, 15 Internet Protocol Encryption Protocol (IpsEC) Server 13 Service Manager 14 Content Provider 16 Cache Proxy Server 17 HTTP Server 18 Continuous Server 19 Integrated Services Exchange (ISS) 20 Internet Protocol (IP) Network 21 Service Manager Mirror 22 Internet Protocol Encryption Protocol (IPSEC ) Channel 23 Service Engine (SE) 24 InfiniBand 25 Backup Service Manager 40 Transmission Sender 41 Transmission Receiver 50 Directory Information Sender 51 Directory Information Receiver 6 Simple Network Management Protocol (SNMP) Administrator. 1 Simple Network Management Protocol (SNMP) agent 91743 revision 32

Claims (1)

1231127 10. Scope of patent application: 1. A network system for hierarchical service and content decentralized management through a directory-enabled network. The network system includes: At least one layer 4 service administrator, which is responsible for managing multiple services. Content delivery network; At least one Tier 3 service administrator who is responsible for managing one of the content delivery networks with multiple data centers; At least one Tier 2 service administrator who is responsible for managing multiple server farms Or one of the data centers of the service engine farm; and at least one Tier 1 service administrator, and the manager and the at least one Tier 2 service administrator establish a directory information routing agreement. 2. The network system and system of item 1 in the patent application No. 4 of Rushen 4, in which each server of the feeding farm is connected by a local area network (LAN) Ethernet switching network, and the LAN The Ethernet switching network supports Layer 2 multicast operations. Through the data center If the data of the patent application scope of the network system is complete, (VPN) 0 system, which will have at least one level directory gateway agreement, and the network system layer of the project scope of the patent application] The service administrator manages to establish 91743 amendment 33 1231127 Directory Gateway Agreement and links to at least one of at least one Tier 2 service administrator, manages the at least one Tier 2 service administrator to create a directory gateway Agreement, and the directory gateway agreement is associated with at least one of the at least one tier 3 service administrator, the at least one tier 3 service administrator is managed to operate as a distinguished name (DNS) server, the server Directs user needs to different data centers that serve as regional load balancing, and also manages the service administrator at the origin of the server farm to establish a directory gateway agreement linked to its parent service administrator. 6. —A hierarchical system and a network system for distributed management of content through a directory-enabled network, the network system includes: at least one layer 4 service administrator, which is responsible for managing multiple inner valley transmission networks and Store content location information of the at least one content delivery network; at least one tier 3 service administrator, the administrator is responsible for managing one of the content delivery networks with multiple data centers, where each of the at least one tier 3 service administrator An internal valley location information of the content delivery network and the content information of the data center are stored; At least one layer 2 service administrator is responsible for managing one of the data centers with multiple server farms or service engine farms , Wherein each of the at least one Tier 2 service manager of the data center stores only the content location information of the responding data center; and at least one Tier 1 service manager is used to create a directory with at least one Tier 2 service manager Information routing protocol, so that management 91743 revised this 34 i more 1231127 Each of the at least one level i service manager and the other level 2 service manager is generated via LAN multicast and opaque link-like complaint packets of the link-state routing protocol serving the known status. 7. The network system for item 6 of the scope of patent application, in which the parent-servers of the shipyard are connected by a LAN Ethernet switching network, and the second Ethernet switching network supports the first 2-layer multiplex broadcast operation. 8. = The network system of item 6 of the patent scope ', in which the female feeders of the German device are connected by an infinite band exchange. 9 For example, the network system of Item 6 of the patent, in which the materials passing through the data center can travel through the IPSEC channel to ensure privacy and security, and can even be referred to as M + (VPN) between the centers. Forms a virtual private network 10 .: Scope 6 network system, in which at least one level 1 service officer is managed to establish a directory gateway agreement, and the network gateway agreement and the At least one of the two level 2 service administrators is connected, and the at least one level 2 service administrator is processed to establish a directory gateway protocol ^ ', and the directory gateway protocol and the at least one level 3 At least one of the service administrators is connected, and the at least one layer 3 service administrator μ is managed to perform as a unique name ⑽SM server, which guides the user's needs to serve as a regional load balance Different data centers, and will also manage the service administrator at point f of the feeding farm to establish a directory gateway agreement linked to its parent service B manager. 91743 amendment 35 1231127 more misin Mu Yueri I u •, a method of gifting through a directory: a hierarchical management method of the network and content decentralization, the directory enabling network includes at least one layer 4 service administrator, at least one Tier 3 service manager, at least one Tier 2 service manager, and at least one Tier 1 service manager, and the method includes the following steps: managing at least one content delivery network with multiple data centers and storing the at least one content delivery Content location information of the network; managing a data center with multiple server farms or service engine farms; and establishing a directory information routing agreement between the at least one tier 1 service manager and the at least one tier 2 service manager, and managing Each server configuration field. 12. The method of claim 11 in the scope of patent application, the method further comprising the step of establishing a directory gateway agreement link between the at least one tier 2 service administrator and the at least one tier 3 service administrator. 91743 Revision 36