专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

41. 发明授权

US08891364B2 Systems and methods for distributing traffic across cluster nodes 有权
标题翻译：跨群集节点分发流量的系统和方法
公开(公告)号：US08891364B2
公开(公告)日：2014-11-18
申请号：US13524697
申请日：2012-06-15
申请人： Sandhya Gopinath , Ranjith Nath , Abhishek Chauhan
发明人： Sandhya Gopinath , Ranjith Nath , Abhishek Chauhan
IPC分类号： H04L12/46 , H04L12/54
CPC分类号： H04L45/24 , H04L45/04 , H04L45/32 , H04L47/125
摘要： The present application is directed towards systems and methods for distributing traffic across nodes of a cluster of intermediary devices through distributed flow distribution (DFD). Upon receipt of network traffic, a cluster node, such as an intermediary computing device or appliance, may internally steer a portion of the traffic via an inter-node communications backplane to one or more other nodes in the cluster so that the load is equally handled by all of the nodes in the cluster. A cluster node may determine whether to process the traffic steered via the backplane by computing a hash of packet parameters of the network traffic. Hash keys may be selected such that uniformity is assured, and the key used in hash computation may be synchronized across all of the nodes so that only one node determines that it should process the particular packets or traffic flow.
摘要翻译：本申请涉及用于通过分布式流分布（DFD）在中间设备集群的节点上分发业务的系统和方法。在接收到网络流量时，集群节点（例如中间计算设备或设备）可以内部地将部分业务经由节点间通信背板引导到集群中的一个或多个其他节点，使得负载被同等地处理由集群中的所有节点组成。群集节点可以通过计算网络业务的分组参数的散列来确定是否处理经由背板导向的业务。可以选择哈希键，使得均匀性得到保证，并且在散列计算中使用的密钥可以在所有节点上同步，使得只有一个节点确定它应该处理特定分组或业务流。

42. 发明授权

US08695084B2 Inferencing data types of message components 有权
标题翻译：推断消息组件的数据类型
公开(公告)号：US08695084B2
公开(公告)日：2014-04-08
申请号：US13212068
申请日：2011-08-17
申请人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Namit Sikka
发明人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Namit Sikka
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/0236
摘要： A method of a device for filtering messages routing across a network includes extracting, by a filter configured on the device, a plurality of message components from messages received via a network. The plurality of message components is identified as having at least a field name in common, including a first field name. A learning engine configured on the device creates a list of data types for values of the first field name. The list includes one or more data types of a value of the first field name identified for each of the plurality of message components. The learning engine determines a most restrictive data type from the list of data types for the values of the first field name of the plurality of message components.
摘要翻译：用于过滤通过网络的消息路由的设备的方法包括通过经由网络接收的消息从设备上配置的过滤器提取多个消息组件。多个消息组件被识别为具有至少一个共同的字段名称，包括第一字段名称。在设备上配置的学习引擎为第一个字段名称的值创建数据类型的列表。列表包括为多个消息组件中的每一个标识的第一字段名称的值的一个或多个数据类型。学习引擎从多个消息组件的第一字段名称的值的数据类型列表中确定最严格的数据类型。

43. 发明授权

US08695083B2 Rule generalization for web application entry point modeling 有权
标题翻译： Web应用程序入口点建模的规则泛化
公开(公告)号：US08695083B2
公开(公告)日：2014-04-08
申请号：US12827415
申请日：2010-06-30
申请人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Priya Nanduri
发明人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Priya Nanduri
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/0236 , H04L63/1425
摘要： A security gateway receives messages, such as URL requests, rejected by a message filter based on a set of rules. The security gateway maintains frequencies with which the messages were rejected by the rules. The security gateway finds rejected messages having a high frequency of occurrence. Since messages having a high frequency of occurrences are more likely to represent legitimate requests rather than malicious attacks, the security gateway generates exception rules, which would allow similar messages to pass through the gateway.
摘要翻译：安全网关接收基于一组规则的消息过滤器拒绝的消息，例如URL请求。安全网关维护消息被规则拒绝的频率。安全网关发现具有高频率发生的被拒绝消息。由于具有高频率发生的消息更有可能代表合法请求而不是恶意攻击，因此安全网关将生成异常规则，这将允许类似的消息通过网关。

44. 发明授权

US08521909B2 Inferring server state in a stateless communication protocol 有权
标题翻译：在无状态通信协议中推送服务器状态
公开(公告)号：US08521909B2
公开(公告)日：2013-08-27
申请号：US13240998
申请日：2011-09-22
申请人： Abhishek Chauhan
发明人： Abhishek Chauhan
IPC分类号： G06F15/16
CPC分类号： H04L67/14 , H04L67/02 , H04L67/142
摘要： Server state objects are identified by an intermediate server among packets transmitted between an application server and a client device on a network based upon a stateless communication protocol, by monitoring and analyzing the packets transmitted between the application server and the client device. The packets are parsed into a plurality of name-value pairs. The entropy of the name-value pairs having a same name field is computed, and candidate data objects that are likely to be server state objects are selected based upon the computed entropy. Candidate data objects that were transmitted bi-directionally between the application server and the client device are identified as server state objects.
摘要翻译：通过监视和分析应用服务器和客户端设备之间传输的数据包，通过基于无状态通信协议在网络上的应用服务器和客户端设备之间传输的数据包中间服务器状态对象进行标识。分组被解析成多个名称 - 值对。计算具有相同名称字段的名称 - 值对的熵，并且基于所计算的熵来选择可能是服务器状态对象的候选数据对象。在应用服务器和客户端设备之间双向传输的候选数据对象被标识为服务器状态对象。

45. 发明申请

US20100332617A1 SYSTEMS AND METHODS FOR PROVIDING A VIRTUAL APPLIANCE IN AN APPLICATION DELIVERY FABRIC 有权
标题翻译：用于在应用交付织物中提供虚拟装置的系统和方法
公开(公告)号：US20100332617A1
公开(公告)日：2010-12-30
申请号：US12771580
申请日：2010-04-30
申请人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
发明人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
IPC分类号： G06F15/16
CPC分类号： G06F9/455 , G06F8/60
摘要： The present disclosure is directed to systems and method for providing a virtual appliance. One or more application delivery controller appliances intermediary to a plurality of clients and a plurality of servers perform a plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers. A virtual application delivery controller is deployed on a device intermediary to the plurality of clients and the plurality of servers. The virtual application delivery controller executing on the device performs one or more of the plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers.
摘要翻译：本公开涉及用于提供虚拟设备的系统和方法。多个客户机和多个服务器中介的一个或多个应用交付控制器设备对在多个客户端和多个服务器之间传送的网络流量执行多个应用传递控制功能。虚拟应用传送控制器被部署在多个客户机和多个服务器的中间设备上。在该设备上执行的虚拟应用传送控制器对多个客户端与多个服务器之间传送的网络流量执行多个应用传递控制功能中的一个或多个。

46. 发明申请

US20060047838A1 Inferring server state in a stateless communication protocol 有权
标题翻译：在无状态通信协议中推送服务器状态
公开(公告)号：US20060047838A1
公开(公告)日：2006-03-02
申请号：US10877362
申请日：2004-06-25
申请人： Abhishek Chauhan
发明人： Abhishek Chauhan
IPC分类号： G06F15/16
CPC分类号： H04L67/14 , H04L67/02 , H04L67/142
摘要： Server state objects are identified by an intermediate server among packets transmitted between an application server and a client device on a network based upon a stateless communcation protocol, by monitoring and analyzing the packets transmitted between the application server and the client device. The packets are parsed into a plurality of name-value pairs. The entropy of the name-value pairs having a same name field is computed, and candidate data objects that are likely to be server state objects are selected based upon the computed entropy. Candidate data objects that were transmitted bi-directionally between the application sever and the client device are identified as server state objects.
摘要翻译：通过监视和分析在应用服务器和客户端设备之间传输的数据包，通过基于无状态通信协议在网络上的应用服务器和客户端设备之间传输的数据包中间服务器状态对象进行标识。分组被解析成多个名称 - 值对。计算具有相同名称字段的名称 - 值对的熵，并且基于所计算的熵来选择可能是服务器状态对象的候选数据对象。在应用服务器和客户端设备之间双向传输的候选数据对象被标识为服务器状态对象。

47. 发明授权

US06330557B1 Method and system for storing data in a hash table that eliminates the necessity of key storage 失效
标题翻译：用于将数据存储在散列表中的方法和系统，消除了密钥存储的必要性
公开(公告)号：US06330557B1
公开(公告)日：2001-12-11
申请号：US09107534
申请日：1998-06-30
申请人： Abhishek Chauhan
发明人： Abhishek Chauhan
IPC分类号： G06F1730
CPC分类号： G06F17/30949 , Y10S707/99933 , Y10S707/99942
摘要： A method and system for storing data in a hash table of a computer system. A hash function specifies a storage location of the hash table for data associated with a given key. But instead of storing the key in this location, a smaller value, denoted a specification value is used. Specification values are produced via a specification function that mathematically captures the information lost by the hashing function when the key is mapped to the hash address. As a result, no two keys can have equal specification values and equal hash values. When examining the data stored at any given hash address, the invention recreates the key's specification value and compares it with the stored specification value. When the compared values are equal, the object is identified. Thus, the invention conclusively establishes whether the data is associated with a given key without storing the key in the hash table.
摘要翻译：一种在计算机系统的哈希表中存储数据的方法和系统。哈希函数指定与给定键相关联的数据的哈希表的存储位置。但是，不是将密钥存储在此位置，而是使用较小的值（表示规格值）。规范值是通过规范函数产生的，当函数映射到哈希地址时，该函数可以数学地捕获散列函数丢失的信息。因此，没有两个键可以具有相同的规格值和相等的散列值。当检查存储在任何给定散列地址的数据时，本发明重新创建密钥的规范值并将其与存储的规范值进行比较。当比较值相等时，识别对象。因此，本发明最终确定数据是否与给定密钥相关联，而不将密钥存储在散列表中。

48. 发明授权

US08654791B2 Systems and methods for packet steering in a multi-core architecture 有权
标题翻译：多核架构中数据包转向的系统和方法
公开(公告)号：US08654791B2
公开(公告)日：2014-02-18
申请号：US13190143
申请日：2011-07-25
申请人： Sandhya Gopinath , Henk Bots , Ramanjaneyulu Y. Talla , Abhishek Chauhan
发明人： Sandhya Gopinath , Henk Bots , Ramanjaneyulu Y. Talla , Abhishek Chauhan
IPC分类号： H04L12/28 , H04J1/16
CPC分类号： G06F9/5005 , G06F2209/5016 , H04L29/12066 , H04L29/12367 , H04L49/90 , H04L61/1511 , H04L61/2514 , H04L67/1002
摘要： Described herein is a method and system for distributing whole and fragmented requests and responses across a multi-core system. Each core executes a packet engine that further processes data packets and data packet fragments allocated to that core. A flow distributor executing within the multi-core system forwards client requests to a packet engine on a core that is selected based on a value generated when a hash is applied to a tuple comprising a client IP address, a client port, a server IP address and a server port identified in the request. The packet engine maintains each element of the tuple and forwards the request to the selected core. The packet engine can also process data packet fragments by assembling the fragments prior to transmitting them to the selected core, or by transmitting the data packet fragments to the selected core.
摘要翻译：这里描述了一种用于在多核系统上分发整个和分段的请求和响应的方法和系统。每个核心执行进一步处理分配给该核心的数据分组和数据分组片段的分组引擎。在多核系统中执行的流分发器将客户端请求转发到核心上的分组引擎，该核心基于当散列应用于包括客户端IP地址，客户端口，服务器IP地址的元组时生成的值以及请求中标识的服务器端口。分组引擎维护元组的每个元素，并将请求转发到所选核心。分组引擎还可以在将分组发送到所选择的核之前组装分片，或者通过将数据分组片段发送到所选核心来处理数据分组片段。

49. 发明申请

US20130339548A1 SYSTEMS AND METHODS FOR ARP RESOLUTION OVER AN ASYNCHRONOUS CLUSTEER NETWORK 有权
标题翻译：用于ARP分辨率的系统和方法通过一个非同寻常的集群网络
公开(公告)号：US20130339548A1
公开(公告)日：2013-12-19
申请号：US13524639
申请日：2012-06-15
申请人： SANDHYA GOPINATH , Ranjith Nath , Abhishek Chauhan
发明人： SANDHYA GOPINATH , Ranjith Nath , Abhishek Chauhan
IPC分类号： G06F15/16
CPC分类号： H04L61/2076 , H04L61/103 , H04L61/2038 , H04L61/6022
摘要： In the present solution, when a cluster node sends an ARP request for an external IP, the node sends a message to all the other nodes, which are part of the CLAG to expect an ARP reply for the IP. When a node in the cluster receives the ARP reply, the node informs the other nodes which are part of the same CLAG to update the MAC address. Also when an ARP entry is learned/updated over a CLAG link as part of an ARP request/Gratuitous ARP, the node learning/updating the ARP entry will inform other nodes which are part of the same CLAG about the learned/updated ARP entry. Nodes in a cluster may communicate between with each other over a dedicated backplane, which may be a separate physical medium.
摘要翻译：在本解决方案中，当集群节点发送外部IP的ARP请求时，节点向所有其他节点发送消息，这些节点是CLAG的一部分，以期望IP的ARP应答。当集群中的节点接收到ARP应答时，节点通知作为同一CLAG一部分的其他节点更新MAC地址。另外，当作为ARP请求/免费ARP的一部分通过CLAG链路学习/更新ARP条目时，学习/更新ARP条目的节点将通知与学习/更新的ARP条目相同的CLAG的其他节点。集群中的节点可以通过专用背板彼此通信，专用背板可以是单独的物理介质。

50. 发明授权

US08413225B2 Systems and methods for management of common application firewall session data in a multiple core system 有权
标题翻译：在多核系统中管理通用应用防火墙会话数据的系统和方法
公开(公告)号：US08413225B2
公开(公告)日：2013-04-02
申请号：US12976678
申请日：2010-12-22
申请人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
发明人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
IPC分类号： H04L29/02
CPC分类号： H04L63/0227 , H04L63/168
摘要： The present invention is directed towards systems and methods for efficiently an intermediary device processing strings in web pages across a plurality of user sessions. A device intermediary to a plurality of clients and a server identifies a plurality of strings in forms and uniform resource locators (URLs) of web pages traversing the device across a plurality of user sessions. The device stores each string of the plurality of strings to one or more allocation arenas shared among a plurality of user session. Each string is indexed using a hash key generated from the string. The device recognizes that a received string transmitted from a webpage of a session of a user is eligible to be shared among the plurality of user sessions. The device determines that a copy of the received string is stored in an allocation arena using a hash generated from the received string. The device uses the copy of the received string stored in the allocation arena in place of the string in the web page of the session of the user to process the web page.
摘要翻译：本发明涉及用于在多个用户会话中有效地中间设备处理网页中的字符串的系统和方法。多个客户端的设备中介和服务器通过多个用户会话跨越该设备的网页的形式和统一的资源定位符（URL）来识别多个字符串。该设备将多个字符串的每个字符串存储在多个用户会话之间共享的一个或多个分配区域中。每个字符串都使用从字符串生成的哈希密钥进行索引。该设备识别出从用户的会话的网页发送的接收到的字符串有资格在多个用户会话之间共享。设备确定使用从接收到的字符串生成的散列来将所接收的字符串的副本存储在分配竞技场中。该设备使用存储在分配竞技场中的接收到的字符串的副本来代替用户的会话的网页中的字符串来处理网页。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式