Search

EP-4546754-B1 - CONNECTION REQUEST FORWARDING SYSTEM AND CONNECTION REQUEST FORWARDING PROGRAM

EP4546754B1EP 4546754 B1EP4546754 B1EP 4546754B1EP-4546754-B1

Inventors

  • NAKAJIMA, KOKI

Dates

Publication Date
20260513
Application Date
20241023

Claims (10)

  1. A connection request forwarding system (30) comprising: a communication device (33) that performs communication between a connection source (50, 60, 70) and a plurality of information processing systems (20); and a control device (35) including a processor, and configured to act, when the processor executes a connection request forwarding program (34A), as a connection request forwarding device (35A) that receives a connection request transmitted from the connection source (50, 60, 70), and forwards the connection request to one of the plurality of information processing systems (20), characterized in that the connection request forwarding system (30) further comprises a database (40) that contains a forwarding rule (41) including forwarding conditions of the connection request, and a priority of each forwarding condition, and a forwarding destination of each forwarding condition, wherein, when at least one of the forwarding conditions is satisfied on a basis of an HTTP request (80) of the connection request, the connection request forwarding device (35A) forwards the connection request to the information processing system (20) which is the forwarding destination associated with the satisfied forwarding condition with the highest priority.
  2. The connection request forwarding system (30) according to claim 1, wherein the database (40) contains the forwarding rule (41) including a first forwarding condition indicating a specific region, the priority of the first forwarding condition, and a first forwarding destination indicating the first information processing system (20) located in the specific region, and the connection request forwarding device (35A) determine, when the HTTP request (80) includes a first character string indicating the specific region, that the first forwarding condition is satisfied, and forwards, when the priority of the first forwarding condition is the highest, the connection request to the first information processing system (20).
  3. The connection request forwarding system (30) according to claim 1, wherein the database (40) contains the forwarding rule (41) including a second forwarding condition indicating a specific function, the priority of the second forwarding condition, and a second forwarding destination indicating the second information processing system (20) for performing the specific function, and the connection request forwarding device (35A) determine, when the HTTP request (80) includes a second character string indicating the specific function, that the second forwarding condition is satisfied, and forwards, when the priority of the second forwarding condition is the highest, the connection request to the second information processing system (20).
  4. The connection request forwarding system (30) according to claim 3, wherein the specific function is a user authentication function or a connection source management function.
  5. The connection request forwarding system (30) according to claim 1, wherein, when the forwarding condition is satisfied, and an instruction to edit a path included in a request line (81) of the HTTP request (80) is associated with the forwarding condition, the connection request forwarding device (35A) edits the path according to the instruction.
  6. The connection request forwarding system (30) according to claim 1, wherein the connection request forwarding device (35A) is configured to: forward the connection request, when the forwarding condition is satisfied but a prohibition condition on the connection request forwarding is not satisfied; and keep from forwarding the connection request when the prohibition condition is satisfied, although the forwarding condition is satisfied.
  7. The connection request forwarding system (30) according to claim 6, wherein the connection request forwarding device (35A) decides that the prohibition condition is satisfied, when an IP address of the connection source (50, 60, 70) is a specific IP address.
  8. The connection request forwarding system (30) according to claim 6, wherein the connection request forwarding device (35A) decides that the prohibition condition is satisfied, when the HTTP request (80) includes a specific third character string.
  9. The connection request forwarding system (30) according to any of claims 1 to 8, wherein, when the forwarding condition is not satisfied, the connection request forwarding device (35A) transmits an error message to the connection source (50, 60, 70), instead of forwarding the connection request.
  10. A connection request forwarding program (34A) being configured to cause a computer (35) including a communication device (33) that performs communication between a connection source (50, 60, 70) and a plurality of information processing systems (20), to act as a connection request forwarding device (35A) that receives a connection request transmitted from the connection source (50, 60, 70), and forwards the connection request to one of a plurality of information processing systems (20), wherein, the computer (35) further includes a database (40) that contains a forwarding rule (41) including forwarding conditions of the connection request, and a priority of each forwarding condition, and a forwarding destination of each forwarding condition, wherein, when at least one of the forwarding conditions is satisfied on a basis of an HTTP request (80) of the connection request, the connection request forwarding program (34A) is further configured to cause the connection request forwarding device (35A) to forward the connection request to the information processing system (20) which is the forwarding destination associated with the satisfied forwarding condition with the highest priority.

Description

BACKGROUND The present invention relates to a connection request forwarding system that forwards a connection request from a connection source, to one of a plurality of information processing systems, and a computer-readable, non-transitory recording medium, having a connection request forwarding program stored therein. A technique to make access to an information processing system from an external connection source, thereby utilizing a function provided by the information processing system, is generally known. In addition, the patent document US 2006/216244 A1, discloses a technique of a networking device receiving an incoming HTTP request from a client, producing a modified HTTP request by applying HTTP request rules to the incoming HTTP request, and sending the modified HTTP request to a server. And the patent document US 2021/273987 A1, discloses a technique of receiving a HTTP service request from a terminal, and forwarding the HTTP service request to a edge cloud gateway in response to determining that a destination address in the HTTP service request is an edge-application virtual Internet Protocol address (VIP). SUMMARY The invention proposes further improvement of the foregoing technique. The invention is set out in the appended set of claims. BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a block diagram showing a system;Fig. 2 is a block diagram showing an example of a gateway;Fig. 3A is a schematic drawing showing an example of a preliminary URL;Fig. 3B is a schematic drawing showing an example of an HTTP request of a connection request, transmitted to the preliminary URL;Fig. 4 is a table showing an example of a forwarding rule;Fig. 5 is a flowchart showing an example of an operation performed by the gateway that has received the connection request;Fig. 6A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 6B is a schematic drawing showing an example of the HTTP request, transmitted to an image processing system cluster;Fig. 7A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 7B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 8 is a schematic drawing showing another example of the forwarding rule;Fig. 9A is a schematic drawing showing another example of the URL to which the connection request is transmitted;Fig. 9B is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 10 is a schematic drawing showing another example of the forwarding rule;Fig. 11 is a flowchart showing another example of the operation performed by the gateway that has received the connection request;Fig. 12A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 12B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 13A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 13B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 14A is a schematic drawing showing another example of the preliminary URL;Fig. 14B is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 15 is a schematic drawing showing another example of the forwarding rule;Fig. 16A is a schematic drawing showing another example of the preliminary URL;Fig. 16B is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 17 is a schematic drawing showing another example of the forwarding rule;Fig. 18 is a flowchart showing another example of the operation performed by the gateway that has received the connection request;Fig. 19A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 19B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 20A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 20B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 21A is a schematic drawing showing another example of the HTTP request of the connection request, transmitted to the preliminary URL;Fig. 21B is a schematic drawing showing another example of the HTTP request, transmitted to the image processing system cluster;Fig. 22A is a schematic drawing showing another example of the preliminary URL;Fig. 22B is a schematic d