Patent ID: 7127713
Filing Date: 2006-10-24
Classification: H04L

Abstract:
1. In an apparatus for use in a content delivery network, the apparatus having a processor, a virtual machine and platform-independent application server code, the improvement comprising: a set of one or more platform-independent code components each of which are capable of being executed by the platform-independent application server code; an edge server process for instantiating a set of one application server code instances, each application server code instance capable of executing a given platform-independent code component; an application programming interface (API) for interfacing the edge server process to each application server code instance and the given platform-independent code component executing thereon; a wrapper process responsive to a given application processing request for initializing the API and starting an application server code instance to handle the request using the given platform-independent code component; a monitoring process to monitor the application server code instances and, responsive to said monitoring, to terminate any application server code instance that attempts to over-utilize a given resource, wherein the given resource is one of: an amount of system memory, an amount of processor time consumed, a number of disk operations, and a number of open network sockets; and an enforcing process to enforce one or more security restrictions on each given platform-independent code component executing in a given application server instance, wherein a security restriction is one of: a restriction on file system reading or writing, a restriction on opening or closing a socket, a restriction on starting, stopping or modifying a thread, a restriction on running or loading code associated with another platform-independent code component, a restriction on loading data associated with another platform-independent code component, and a restriction on making native kernel calls.