专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08300532B1 Forwarding plane configuration for separation of services and forwarding in an integrated services router 有权
标题翻译：转发平面配置，用于在综合业务路由器中分离业务和转发
公开(公告)号：US08300532B1
公开(公告)日：2012-10-30
申请号：US12235677
申请日：2008-09-23
申请人： Anjan Venkatramani , Kannan Varadhan , Jean-Marc Frailong , Sanjay Gupta , Linda Sun , Sankar Ramamoorthi , Pradeep Sindhu , Anand S. Athreya , Chih-Wei Chao , Shuhua Ge
发明人： Anjan Venkatramani , Kannan Varadhan , Jean-Marc Frailong , Sanjay Gupta , Linda Sun , Sankar Ramamoorthi , Pradeep Sindhu , Anand S. Athreya , Chih-Wei Chao , Shuhua Ge
IPC分类号： H04L12/26 , H04L12/56
CPC分类号： H04L45/306 , H04L45/38
摘要： A method may include receiving a packet at an ingress line interface in a forwarding plane of a network element, the packet including header information. The method may also include conducting a flow table lookup in the forwarding plane to identify an existing flow for the packet and determining, in the forwarding plane and based on the header information, whether a predicted flow can be identified for the packet if an existing flow can not be identified. The method may further include performing a service access control list (ACL) lookup in the forwarding plane if a predicted flow can not be identified; and forwarding the packet to one of a services plane or an egress line interface in the forwarding plane based on one of the existing flow, the predicted flow, or the service ACL lookup.
摘要翻译：方法可以包括在网元的转发平面中的入口线路接口处接收分组，该分组包括报头信息。该方法还可以包括在转发平面中进行流表查找以识别分组的现有流，并且在转发平面中并且基于报头信息来确定是否可以为分组识别预测流，如果现有流无法识别。该方法还可以包括如果不能识别预测流，则在转发平面中执行服务访问控制列表（ACL）查找; 以及基于现有流，预测流或服务ACL查找之一将分组转发到转发平面中的服务平面或出口线路接口之一。

2. 发明申请

US20100043067A1 SCALABLE SECURITY SERVICES FOR MULTICAST IN A ROUTER HAVING INTEGRATED ZONE-BASED FIREWALL 有权
标题翻译：具有集成区域防火墙的路由器中的可扩展安全服务
公开(公告)号：US20100043067A1
公开(公告)日：2010-02-18
申请号：US12432366
申请日：2009-04-29
申请人： Kannan Varadhan , Jean-Marc Frailong , Anjan Venkatramani
发明人： Kannan Varadhan , Jean-Marc Frailong , Anjan Venkatramani
IPC分类号： G06F21/00 , H04L12/56
CPC分类号： H04L63/0227 , H04L12/18 , H04L45/00 , H04L45/16 , H04L45/30 , H04L63/0254 , H04L63/104
摘要： A multicast-capable firewall allows firewall security policies to be applied to multicast traffic. The multicast-capable firewall may be integrated within a routing device, thus allowing a single device to provide both routing functionality, including multicast support, as well as firewall services. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to multicast packets. The user interface supports a syntax that allows the user to define subsets of the plurality of interfaces associated with the zones, and define a single multicast policy to be applied to multicast sessions associated with a multicast group. The multicast policy identifies common services to be applied pre-replication, and exceptions specifying additional services to be applied post-replication to copies of the multicast packets for the one or more zones.
摘要翻译：具有组播功能的防火墙允许将防火墙安全策略应用于组播流量。可组播的防火墙可以集成在路由设备内，从而允许单个设备提供包括组播支持在内的路由功能以及防火墙服务。路由设备提供一个用户界面，用户通过该用户界面指定一个或多个区域，以便在向组播数据包应用状态防火墙服务时由集成防火墙识别。用户界面支持语法，允许用户定义与区域相关联的多个接口的子集，并且定义要应用于与多播组相关联的多播会话的单个组播策略。多播策略标识要应用预复制的常用服务，以及将要复制后应用的其他服务指定给一个或多个区域的多播数据包副本的异常。

3. 发明授权

US08713627B2 Scalable security services for multicast in a router having integrated zone-based firewall 有权
标题翻译：具有集成区域防火墙的路由器中可多播的可扩展安全服务
公开(公告)号：US08713627B2
公开(公告)日：2014-04-29
申请号：US12432366
申请日：2009-04-29
申请人： Kannan Varadhan , Jean-Marc Frailong , Anjan Venkatramani
发明人： Kannan Varadhan , Jean-Marc Frailong , Anjan Venkatramani
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L12/18 , H04L45/00 , H04L45/16 , H04L45/30 , H04L63/0254 , H04L63/104
摘要： A multicast-capable firewall allows firewall security policies to be applied to multicast traffic. The multicast-capable firewall may be integrated within a routing device, thus allowing a single device to provide both routing functionality, including multicast support, as well as firewall services. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to multicast packets. The user interface supports a syntax that allows the user to define subsets of the plurality of interfaces associated with the zones, and define a single multicast policy to be applied to multicast sessions associated with a multicast group. The multicast policy identifies common services to be applied pre-replication, and exceptions specifying additional services to be applied post-replication to copies of the multicast packets for the one or more zones.
摘要翻译：具有组播功能的防火墙允许将防火墙安全策略应用于组播流量。可组播的防火墙可以集成在路由设备内，从而允许单个设备提供包括组播支持在内的路由功能以及防火墙服务。路由设备提供一个用户界面，用户通过该用户界面指定一个或多个区域，以便在向组播数据包应用状态防火墙服务时由集成防火墙识别。用户界面支持语法，允许用户定义与区域相关联的多个接口的子集，并且定义要应用于与多播组相关联的多播会话的单个组播策略。多播策略标识要应用预复制的常用服务，以及将要复制后应用的其他服务指定给一个或多个区域的多播数据包副本的异常。

4. 发明授权

US08730954B2 Methods and apparatus related to any-to-any connectivity within a data center 有权
标题翻译：与数据中心内的任何连接相关的方法和设备
公开(公告)号：US08730954B2
公开(公告)日：2014-05-20
申请号：US12495337
申请日：2009-06-30
申请人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
发明人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
IPC分类号： H04Q11/00 , H04Q3/68 , H04L12/56
CPC分类号： H04Q3/68 , H04L49/1515 , H04L49/1523 , H04L49/153 , H04L49/254 , H04L49/351 , H04L49/40 , H04L49/70
摘要： In one embodiment, an apparatus includes a switch core that defines a single logical entity and has a multi-stage switch fabric physically distributed across a plurality of chassis. The multi-stage switch fabric has a plurality of ingress ports and a plurality of egress ports. The switch core is configured to be coupled to a plurality of peripheral processing devices via the plurality of ingress ports and the plurality of egress ports. The switch core is also configured to provide non-blocking connectivity at line rate between a first peripheral processing device disposed with a first chassis and a second peripheral processing device disposed within a second chassis.
摘要翻译：在一个实施例中，设备包括交换机核心，其定义单个逻辑实体并且具有物理上分布在多个机箱上的多级交换机结构。多级交换结构具有多个入口和多个出口。交换机核心被配置为经由多个入口端口和多个出口端口耦合到多个外围处理设备。交换机核心还被配置为在布置在第一机架的第一外围处理设备与设置在第二机架内的第二外围处理设备之间的线路速率下提供非阻塞连接。

5. 发明授权

US08335213B2 Methods and apparatus related to low latency within a data center 有权
标题翻译：与数据中心内的低延迟相关的方法和设备
公开(公告)号：US08335213B2
公开(公告)日：2012-12-18
申请号：US12495358
申请日：2009-06-30
申请人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
发明人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
IPC分类号： H04Q11/00
CPC分类号： H04L49/602 , H04L49/1515 , H04L49/351 , H04L49/357
摘要： In one embodiment, an apparatus includes a switch core that has a multi-stage switch fabric. The multi-stage switch fabric has a set of ingress ports and a set of egress ports. The switch core can be configured to be coupled to a set of edge devices via the set of ingress ports and the set of egress ports. The switch core can be configured to receive a packet from an ingress port from the set of ingress ports. The switch core can be configured to send a set of cells associated with the packet from the ingress port to an egress port from the set of egress ports without a store-and-forward delay associated with a zero-load latency for the switch core.
摘要翻译：在一个实施例中，一种装置包括具有多级交换结构的交换机核心。多级交换结构具有一组入口端口和一组出口端口。交换机核心可以被配置为经由一组入口端口和出口端口组来耦合到一组边缘设备。交换机核心可以配置为从入口端口的一组入口端口接收数据包。交换机核心可以被配置为将来自入口端口的与分组相关联的一组小区从出口端口发送到出口端口，而没有与交换机核心的零负载延迟相关联的存储转发延迟。

6. 发明申请

US20100165983A1 SYSTEM ARCHITECTURE FOR A SCALABLE AND DISTRIBUTED MULTI-STAGE SWITCH FABRIC 有权
标题翻译：用于可扩展和分布式多级开关织物的系统架构
公开(公告)号：US20100165983A1
公开(公告)日：2010-07-01
申请号：US12345500
申请日：2008-12-29
申请人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
发明人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
IPC分类号： H04Q9/02
CPC分类号： H04L49/40 , H04L49/00 , H04L49/1515
摘要： In some embodiments, an apparatus includes a first housing, a second housing and at least one cable. The first housing includes a first interface card of a switch fabric. The second housing includes a second interface card of the switch fabric and a third interface card of the switch fabric. The second interface card of the switch fabric is operatively and physically coupled to the third interface card of the switch fabric via a midplane. The second interface card defines a plane that is nonparallel to the a plane defined by the third interface card and a plane defined by the midplane. The plane defined by the third interface card is nonparallel to the plane defined by the second interface card and the plane defined by the midplane. The cable is configured to operatively couple the first interface card to the second interface card.
摘要翻译：在一些实施例中，装置包括第一壳体，第二壳体和至少一个电缆。第一壳体包括交换结构的第一接口卡。第二壳体包括交换结构的第二接口卡和交换结构的第三接口卡。交换结构的第二接口卡经由中间平面操作和物理地耦合到交换结构的第三接口卡。第二接口卡限定了与第三接口卡所定义的平面不平行的平面和由中平面限定的平面。由第三接口卡定义的平面与由第二接口卡定义的平面和由中平面限定的平面不平行。电缆被配置为将第一接口卡可操作地耦合到第二接口卡。

7. 发明申请

US20100061242A1 METHODS AND APPARATUS RELATED TO A FLEXIBLE DATA CENTER SECURITY ARCHITECTURE 有权
标题翻译：与灵活数据中心安全架构相关的方法和装置
公开(公告)号：US20100061242A1
公开(公告)日：2010-03-11
申请号：US12558126
申请日：2009-09-11
申请人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
发明人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
IPC分类号： H04L12/24 , H04L12/50
CPC分类号： H04L49/30 , H04L41/0806 , H04L41/0846 , H04L49/257 , H04L49/35 , H04L49/356 , H04L63/101
摘要： In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.
摘要翻译：在一个实施例中，边缘设备可被配置为耦合到多级交换结构和外围处理设备。边缘设备和多级交换结构可以共同定义单个逻辑实体。来自边缘设备的第一边缘设备可以被配置为从外围处理设备耦合到第一外围处理设备。来自边缘设备的第二边缘设备可以被配置为从外围处理设备耦合到第二外围处理设备。第一边缘设备可以被配置为使得可以在第一外围处理设备处定义包括第一虚拟资源的虚拟资源。网络管理模块，其耦合到所述边缘设备并且被配置为提供所述虚拟资源，使得所述第一虚拟资源可以从所述第一外围处理设备迁移到所述第二外围处理设备。

8. 发明授权

US08804710B2 System architecture for a scalable and distributed multi-stage switch fabric 有权
标题翻译：用于可扩展和分布式多级交换结构的系统架构
公开(公告)号：US08804710B2
公开(公告)日：2014-08-12
申请号：US12345500
申请日：2008-12-29
申请人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
发明人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
IPC分类号： H04L12/50 , H04L12/56
CPC分类号： H04L49/40 , H04L49/00 , H04L49/1515
摘要： In some embodiments, an apparatus includes a first housing, a second housing and at least one cable. The first housing includes a first interface card of a switch fabric. The second housing includes a second interface card of the switch fabric and a third interface card of the switch fabric. The second interface card of the switch fabric is operatively and physically coupled to the third interface card of the switch fabric via a midplane. The second interface card defines a plane that is nonparallel to the a plane defined by the third interface card and a plane defined by the midplane. The plane defined by the third interface card is nonparallel to the plane defined by the second interface card and the plane defined by the midplane. The cable is configured to operatively couple the first interface card to the second interface card.
摘要翻译：在一些实施例中，装置包括第一壳体，第二壳体和至少一个电缆。第一壳体包括交换结构的第一接口卡。第二壳体包括交换结构的第二接口卡和交换结构的第三接口卡。交换结构的第二接口卡经由中间平面操作和物理地耦合到交换结构的第三接口卡。第二接口卡限定了与第三接口卡所定义的平面不平行的平面和由中平面限定的平面。由第三接口卡定义的平面与由第二接口卡定义的平面和由中平面限定的平面不平行。电缆被配置为将第一接口卡可操作地耦合到第二接口卡。

9. 发明授权

US08265071B2 Methods and apparatus related to a flexible data center security architecture 有权
标题翻译：与灵活的数据中心安全架构相关的方法和设备
公开(公告)号：US08265071B2
公开(公告)日：2012-09-11
申请号：US12558126
申请日：2009-09-11
申请人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
发明人： Pradeep Sindhu , Gunes Aybay , Jean-Marc Frailong , Anjan Venkatramani , Quaizar Vohra
IPC分类号： H04L12/56
CPC分类号： H04L49/30 , H04L41/0806 , H04L41/0846 , H04L49/257 , H04L49/35 , H04L49/356 , H04L63/101
摘要： In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.
摘要翻译：在一个实施例中，边缘设备可被配置为耦合到多级交换结构和外围处理设备。边缘设备和多级交换结构可以共同定义单个逻辑实体。来自边缘设备的第一边缘设备可以被配置为从外围处理设备耦合到第一外围处理设备。来自边缘设备的第二边缘设备可以被配置为从外围处理设备耦合到第二外围处理设备。第一边缘设备可以被配置为使得可以在第一外围处理设备处定义包括第一虚拟资源的虚拟资源。网络管理模块，其耦合到所述边缘设备并且被配置为提供所述虚拟资源，使得所述第一虚拟资源可以从所述第一外围处理设备迁移到所述第二外围处理设备。

10. 发明申请

US20100165984A1 METHODS AND APPARATUS RELATED TO A MODULAR SWITCH ARCHITECTURE 有权
标题翻译：与模块化开关结构相关的方法和装置
公开(公告)号：US20100165984A1
公开(公告)日：2010-07-01
申请号：US12345502
申请日：2008-12-29
申请人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
发明人： Gunes Aybay , Jaya Bandyopadhyay , Jean-Marc Frailong , Pradeep Sindhu , Philip A. Thomas , Anjan Venkatramani
IPC分类号： H04L12/50
CPC分类号： H04L49/15 , H04L49/10 , H04L49/45
摘要： In some embodiments, an apparatus includes a first housing, a second housing and at least one cable. The first housing includes a first interface card of a switch fabric. The second housing includes a second interface card of the switch fabric and a third interface card of the switch fabric. The second interface card of the switch fabric is operatively and physically coupled to the third interface card of the switch fabric via a midplane. The second interface card defines a plane that is nonparallel to the a plane defined by the third interface card and a plane defined by the midplane. The plane defined by the third interface card is nonparallel to the plane defined by the second interface card and the plane defined by the midplane. The cable is configured to operatively couple the first interface card to the second interface card.
摘要翻译：在一些实施例中，装置包括第一壳体，第二壳体和至少一个电缆。第一壳体包括交换结构的第一接口卡。第二壳体包括交换结构的第二接口卡和交换结构的第三接口卡。交换结构的第二接口卡经由中间平面操作和物理地耦合到交换结构的第三接口卡。第二接口卡限定了与第三接口卡所定义的平面不平行的平面和由中平面限定的平面。由第三接口卡定义的平面与由第二接口卡定义的平面和由中平面限定的平面不平行。电缆被配置为将第一接口卡可操作地耦合到第二接口卡。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式