专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08532116B2 Extended subnets 有权
公开(公告)号：US08532116B2
公开(公告)日：2013-09-10
申请号：US12460614
申请日：2009-07-21
申请人： Maurizio Portolani , Christian Elsen
发明人： Maurizio Portolani , Christian Elsen
IPC分类号： H04L12/28 , H04L12/56 , H04L12/46 , G06F9/50
CPC分类号： H04L45/74 , G06F9/5077 , H04L12/4633 , H04L12/4641 , H04L45/00 , H04L45/586 , H04L45/66 , H04L2212/00
摘要： There is provided a router for use in a datacenter, the router including a frame receiving module operative to receive a traffic frame and a frame forwarding module operative to forward the traffic frame to a second router in a second datacenter if a Destination Media Access Control (DMAC) address included in the traffic frame is different from all of the following: a Burned in Address of the router; a Burned in Address of at least one server associated with the router; a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of the router; and a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by the router.

2. 发明申请

US20110019676A1 Extended subnets 有权
标题翻译：扩展子网
公开(公告)号：US20110019676A1
公开(公告)日：2011-01-27
申请号：US12460614
申请日：2009-07-21
申请人： Maurizio Portolani , Christian Elsen
发明人： Maurizio Portolani , Christian Elsen
IPC分类号： H04L12/56
CPC分类号： H04L45/74 , G06F9/5077 , H04L12/4633 , H04L12/4641 , H04L45/00 , H04L45/586 , H04L45/66 , H04L2212/00
摘要： There is provided a router for use in a datacenter, the router including a frame receiving module operative to receive a traffic frame and a frame forwarding module operative to forward the traffic frame to a second router in a second datacenter if a Destination Media Access Control (DMAC) address included in the traffic frame is different from all of the following: a Burned in Address of the router; a Burned in Address of at least one server associated with the router; a Media Access Control (MAC) address of one of a Hot Standby Routing Protocol (HSRP) group and a Virtual Router Redundancy Protocol (VRRP) group of the router; and a MAC address of one of a HSRP group and a VRRP group of a subnet hosted by the router.
摘要翻译：提供了一种在数据中心中使用的路由器，路由器包括可操作以接收业务帧的帧接收模块和可在第二数据中心中将业务帧转发到第二路由器的帧转发模块，如果目的地媒体访问控制（包含在流量帧中的DMAC地址与以下所有不同：a路由器的已烧录地址; 与路由器相关联的至少一个服务器的已烧录地址; 路由器的热备份路由协议（HSRP）组和虚拟路由器冗余协议（VRRP）组之一的媒体访问控制（MAC）地址; 以及由路由器托管的子网的HSRP组和VRRP组之一的MAC地址。

3. 发明授权

US07657940B2 System for SSL re-encryption after load balance 有权
标题翻译：负载平衡后的SSL重新加密系统
公开(公告)号：US07657940B2
公开(公告)日：2010-02-02
申请号：US11124003
申请日：2005-05-06
申请人： Maurizio Portolani , Mauricio Arregoces , David W. Chang , Nagaraj A. Bagepalli , Stefano Testa
发明人： Maurizio Portolani , Mauricio Arregoces , David W. Chang , Nagaraj A. Bagepalli , Stefano Testa
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/0254 , H04L63/0464 , H04L63/166 , H04L67/1002 , H04L67/1006 , H04L67/101 , H04L67/1027
摘要： A data center provides secure handling of HTTPS traffic using backend SSL decryption and encryption in combination with a load balancer such as a content switch. The load balancer detects HTTPS traffic and redirects it to an SSL offloading device for decryption and return to the load balancer. The load balancer then uses the clear text traffic for load balancing purposes before it redirects the traffic back to the SSL offloading device for re-encryption. Thereafter, the re-encrypted traffic is sent to the destination servers in the data center. In one embodiment, the combination with the back-end SSL with an intrusion detection system improves security by performing intrusion detection on the decrypted HTTPS traffic.
摘要翻译：数据中心使用后端SSL解密和加密以及诸如内容交换机之类的负载平衡器来提供对HTTPS流量的安全处理。负载平衡器检测HTTPS流量并将其重定向到SSL卸载设备进行解密并返回到负载均衡器。然后，负载平衡器在将流量重定向到SSL卸载设备以进行重新加密之前，使用明文流量进行负载平衡。此后，重新加密的流量被发送到数据中心中的目的地服务器。在一个实施例中，与具有入侵检测系统的后端SSL的组合通过对解密的HTTPS业务进行入侵检测来提高安全性。

4. 发明授权

US07643468B1 Data-center network architecture 有权
标题翻译：数据中心网络架构
公开(公告)号：US07643468B1
公开(公告)日：2010-01-05
申请号：US11227377
申请日：2005-09-14
申请人： Mauricio Arregoces , Maurizio Portolani
发明人： Mauricio Arregoces , Maurizio Portolani
IPC分类号： H04L12/28
CPC分类号： H04L12/462 , H04L67/1097
摘要： A data-center network architecture. The data-center network architecture incorporates a front end having an aggregation layer exhibiting integrated service-module intelligence. A server farm connects the front end with a storage network. In a specific embodiment, the aggregation layer includes plural interconnected multilayer switches incorporating service-module intelligence implemented via one or more service modules. Plural layer-2 switches communicate with the plural multilayer switches. The server farm includes one or more servers that are dual homed or multihomed with the plural layer-2 switches. The storage network includes plural interconnected multilayer directors and one or more Fibre Channel hosts using Host Bus Adapters (HBAs) that interface one or more data-storage devices to the server farm.
摘要翻译：数据中心网络架构。数据中心网络架构包含具有展示集成服务模块智能的聚合层的前端。服务器场将前端连接到存储网络。在具体实施例中，聚合层包括多个互连多层交换机，其包括通过一个或多个服务模块实现的业务模块智能。多层二层交换机与多层多层交换机进行通信。服务器场包括一个或多个双重归属或多重第二层交换机的服务器。存储网络包括多个互连多层导向器和使用主机总线适配器（HBA）的一个或多个光纤通道主机，其将一个或多个数据存储设备连接到服务器场。

5. 发明申请

US20060095969A1 System for SSL re-encryption after load balance 有权
标题翻译：负载平衡后的SSL重新加密系统
公开(公告)号：US20060095969A1
公开(公告)日：2006-05-04
申请号：US11124003
申请日：2005-05-06
申请人： Maurizio Portolani , Mauricio Arregoces , David Chang , Nagaraj Bagepalli , Stefano Testa
发明人： Maurizio Portolani , Mauricio Arregoces , David Chang , Nagaraj Bagepalli , Stefano Testa
IPC分类号： G06F12/14
CPC分类号： H04L63/0254 , H04L63/0464 , H04L63/166 , H04L67/1002 , H04L67/1006 , H04L67/101 , H04L67/1027
摘要： A data center provides secure handling of HTTPS traffic using backend SSL decryption and encryption in combination with a load balancer such as a content switch. The load balancer detects HTTPS traffic and redirects it to an SSL offloading device for decryption and return to the load balancer. The load balancer then uses the clear text traffic for load balancing purposes before it redirects the traffic back to the SSL offloading device for re-encryption. Thereafter, the re-encrypted traffic is sent to the destination servers in the data center. In one embodiment, the combination with the back-end SSL with an intrusion detection system improves security by performing intrusion detection on the decrypted HTTPS traffic.
摘要翻译：数据中心使用后端SSL解密和加密以及诸如内容交换机之类的负载平衡器来提供对HTTPS流量的安全处理。负载平衡器检测HTTPS流量并将其重定向到SSL卸载设备进行解密并返回到负载均衡器。然后，负载平衡器在将流量重定向到SSL卸载设备以进行重新加密之前，使用明文流量进行负载平衡。此后，重新加密的流量被发送到数据中心中的目的地服务器。在一个实施例中，与具有入侵检测系统的后端SSL的组合通过对解密的HTTPS业务进行入侵检测来提高安全性。

6. 发明申请

US20110055470A1 MEASURING ATTRIBUTES OF CLIENT-SERVER APPLICATIONS 有权
标题翻译：测量客户端服务器应用的属性
公开(公告)号：US20110055470A1
公开(公告)日：2011-03-03
申请号：US12551128
申请日：2009-08-31
申请人： MAURIZIO PORTOLANI
发明人： MAURIZIO PORTOLANI
IPC分类号： G06F12/00
CPC分类号： H04L43/0864 , H04L41/0213 , H04L43/106 , H04L67/025 , H04L67/10 , H04L67/28 , H04L67/34
摘要： In an embodiment, a packet data switching system comprises content-addressable memory configured to redirect, to a measurement computer, a request to access a server application program hosted at a server computer in response to receiving the request from a client computer; the measurement computer comprises request rewriting logic configured to receive the request via redirection based on the CAM, to record a first time value representing a time of receiving the request, to forward the request to the server application, to receive a response from the server computer to the request, to rewrite a payload of the response by embedding a browser-executable measurement reporting script into the payload, and to forward the rewritten response to the client; performance recording logic configured to receive a second time value from the client based on the client computer executing the measurement reporting script, and to store a performance record with the time values.
摘要翻译：在一个实施例中，分组数据交换系统包括内容寻址存储器，其被配置为响应于接收到来自客户端计算机的请求，将测量计算机重定向访问在服务器计算机上托管的服务器应用程序的请求; 测量计算机包括被配置为经由基于CAM的重定向来接收请求的请求重写逻辑，以记录表示接收请求的时间的第一时间值，将请求转发到服务器应用，以从服务器计算机接收响应通过将浏览器可执行测量报告脚本嵌入到有效载荷中来重写响应的有效载荷，并将重写的响应转发给客户端; 性能记录逻辑，被配置为基于执行测量报告脚本的客户端计算机从客户端接收第二时间值，并且存储具有时间值的性能记录。

7. 发明授权

US07792113B1 Method and system for policy-based forwarding 有权
标题翻译：基于策略的转发方法和系统
公开(公告)号：US07792113B1
公开(公告)日：2010-09-07
申请号：US10274608
申请日：2002-10-21
申请人： Marco E. Foschiano , Venkateshwar R. Pullela , Justin Q. Chen , Robert C. Benea , Maurizio Portolani
发明人： Marco E. Foschiano , Venkateshwar R. Pullela , Justin Q. Chen , Robert C. Benea , Maurizio Portolani
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L12/4675
摘要： A method of operating a network is disclosed. The method includes identifying a packet as being subject to a policy and forwarding said packet based on said policy, if said packet is subject to said policy.
摘要翻译：公开了一种操作网络的方法。所述方法包括：如果所述分组受到所述策略的影响，则将分组识别为受策略并基于所述策略转发所述分组。

8. 发明授权

US07610375B2 Intrusion detection in a data center environment 有权
标题翻译：数据中心环境中的入侵检测
公开(公告)号：US07610375B2
公开(公告)日：2009-10-27
申请号：US11090083
申请日：2005-03-25
申请人： Maurizio Portolani , Mauricio Arregoces , Timothy W. Stevenson
发明人： Maurizio Portolani , Mauricio Arregoces , Timothy W. Stevenson
IPC分类号： G06F15/173
CPC分类号： H04L63/0218 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1441
摘要： An intrusion detection system (IDS) is capable of identifying the source of traffic, filtering the traffic to classify it as either safe or suspect and then applying sophisticated detection techniques such as stateful pattern recognition, protocol parsing, heuristic detection or anomaly detection either singularly or in combination based on the traffic type. In a network environment, each traffic source is provided with at least one IDS sensor that is dedicated to monitoring a specific type of traffic such as RPC, HTTP, SMTP, DNS, or others. Traffic from each traffic source is filtered to remove known safe traffic to improve efficiency and increase accuracy by keeping each IDS sensor focused on a specific traffic type.
摘要翻译：入侵检测系统（IDS）能够识别流量来源，过滤流量以将其分类为安全或可疑，然后应用复杂的检测技术，例如状态模式识别，协议解析，启发式检测或异常检测，单独或异常检测基于流量类型组合。在网络环境中，每个流量源都提供至少一个专用于监视特定类型的流量（如RPC，HTTP，SMTP，DNS或其他）的IDS传感器。过滤每个流量来源的流量，以清除已知的安全流量，从而通过将每个IDS传感器集中在特定流量类型上来提高效率并提高准确性。

9. 发明授权

US07571470B2 One arm data center topology with layer 4 and layer 7 services 有权
标题翻译：单臂数据中心拓扑结合第4层和第7层服务
公开(公告)号：US07571470B2
公开(公告)日：2009-08-04
申请号：US11089754
申请日：2005-03-24
申请人： Mauricio Arregoces , Maurizio Portolani , Christopher M. O'Brien , Stefano Testa
发明人： Mauricio Arregoces , Maurizio Portolani , Christopher M. O'Brien , Stefano Testa
IPC分类号： G06F21/00
CPC分类号： H04L63/0227 , H04L63/20 , H04L67/1002 , H04L67/1014
摘要： A one-arm data center topology routes traffic between internal sub-nets and between a sub-net and an outside network through a common chain of services. The data center topology employs layer 4 services on a common chassis or platform to provide routing and firewall services while reducing the number of devices necessary to implement the data center and simplifying configuration. Load balancing is provided by a load balancing device. In the one-arm topology, policy based routing or client network address translations or NAT pushes traffic to the CSM.
摘要翻译：单臂数据中心拓扑通过公共服务链路在内部子网之间以及子网和外部网络之间路由流量。数据中心拓扑在公共机箱或平台上采用第4层服务，以提供路由和防火墙服务，同时减少实现数据中心所需的设备数量并简化配置。负载平衡由负载平衡设备提供。在单臂拓扑中，基于策略的路由或客户端网络地址转换或NAT将流量推送到CSM。

10. 发明申请

US20060106922A1 Architecture and method for accessing services in a data center 有权
公开(公告)号：US20060106922A1
公开(公告)日：2006-05-18
申请号：US11133799
申请日：2005-05-21
申请人： Mauricio Arregoces , Maurizio Portolani
发明人： Mauricio Arregoces , Maurizio Portolani
IPC分类号： G06F15/173 , H04J3/16
CPC分类号： H04L67/1006 , H04L67/1002 , H04L67/1014
摘要： An architecture, arrangement, system, and method for providing service access in a data center are disclosed. In one embodiment, an arrangement can include: an aggregation switch configured to transfer data between a network and an access layer; and service modules coupled to the aggregation switch, where each service module is configured to provide a service for the data when selected. The service modules can include: firewall, load balancer, secure sockets layer (SSL) offloader, intrusion detection system (IDS), and cache, for example. Further, the service selection can be substantially transparent to an associated server.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式