专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09258277B1 Decentralized packet dispatch in network devices 有权
标题翻译：网络设备中的分散分组调度
公开(公告)号：US09258277B1
公开(公告)日：2016-02-09
申请号：US13534095
申请日：2012-06-27
申请人： Yan Zhuang , Xiao Ping Zhu , Rakesh Nair Gopala Krishnan Nair , Dongyi Jiang , Yong Tian , Jinfeng Yu , Haiyu Wang
发明人： Yan Zhuang , Xiao Ping Zhu , Rakesh Nair Gopala Krishnan Nair , Dongyi Jiang , Yong Tian , Jinfeng Yu , Haiyu Wang
IPC分类号： G06F17/00 , H04L29/06 , H04L12/851
CPC分类号： H04L63/0236 , H04L47/2483 , H04L61/2517 , H04L61/2539 , H04L61/255
摘要： In general, techniques are described for performing decentralized packet dispatch. A network device comprising one or more service processing units (SPUs) and an interface may implement the techniques. The interface receives a packet associated with a session and selects a first one of SPUs to dispatch the packet based on first information extracted from the packet. The first one of the SPUs dispatches the packet to a second one of the SPUs based on second information extracted from the packet. The second one of the SPUs performs first pass processing to configure the network security device to perform fast path processing of the packet such that second one of the SPUs applies one or more services to the packet and subsequent packets associated with the same session without application of services to the packets by the first one of the service processing units.
摘要翻译：一般来说，描述了执行分散式分组调度的技术。包括一个或多个服务处理单元（SPU）和接口的网络设备可以实现这些技术。该接口接收与会话关联的分组，并根据从该分组提取的第一信息选择一个SPU中的第一个分组来分组。基于从分组中提取的第二信息，第一个SPU将分组分派到第二个SPU。第二个SPU执行第一遍处理以配置网络安全设备来执行分组的快速路径处理，使得第二个SPU将一个或多个服务应用于与相同会话关联的分组和后续分组，而不应用由第一个服务处理单元向数据包提供服务。

2. 发明授权

US08224976B2 Using a server's capability profile to establish a connection 有权
标题翻译：使用服务器的能力配置文件建立连接
公开(公告)号：US08224976B2
公开(公告)日：2012-07-17
申请号：US12343694
申请日：2008-12-24
申请人： Dongyi Jiang , Laxminarayana Tumuluru , Jianwen Pi
发明人： Dongyi Jiang , Laxminarayana Tumuluru , Jianwen Pi
IPC分类号： G06F15/16
CPC分类号： H04L67/42 , H04L63/02 , H04L67/14 , H04L67/2842 , H04L67/303 , H04L69/16
摘要： A network device connects between a client and a server. The network device is configured to store information regarding a capability of the server; receive a first message, from the client, intended for the server; obtain the stored information regarding the capability of the server; generate a second message that includes the information regarding the capability of the server; send the second message to the client; receive a third message from the client; and establish, based on the third message, a connection between the client and the server.
摘要翻译：网络设备在客户端和服务器之间连接。网络设备被配置为存储关于服务器的能力的信息; 从客户端接收针对服务器的第一条消息; 获取有关服务器能力的存储信息; 生成包括关于服务器的能力的信息的第二消息; 向客户发送第二条消息; 从客户端收到第三条消息; 并基于第三个消息建立客户端和服务器之间的连接。

3. 发明授权

US07952999B1 Feedback control of processor use in virtual systems 有权
标题翻译：虚拟系统中处理器使用的反馈控制
公开(公告)号：US07952999B1
公开(公告)日：2011-05-31
申请号：US11745707
申请日：2007-05-08
申请人： Dongyi Jiang , David Yu
发明人： Dongyi Jiang , David Yu
IPC分类号： H04L29/02
CPC分类号： H04L63/0227 , H04L63/20
摘要： A device may receive packets for a system and obtain a packet drop rate of the system, a processor utilization rate of the system, and a target processor utilization rate of the system. In addition, the device may determine a target packet drop rate based on the packet drop rate, the processor utilization rate, and the target processor utilization rate. The device may drop a portion of the packets in accordance with the packet drop rate.
摘要翻译：设备可以接收系统的分组，并获得系统的分组丢弃率，系统的处理器利用率和系统的目标处理器利用率。此外，设备可以基于分组丢弃率，处理器利用率和目标处理器利用率来确定目标分组丢弃率。该设备可以根据分组丢弃率丢弃一部分分组。

4. 发明授权

US08208406B1 Packet forwarding using feedback controlled weighted queues dynamically adjusted based on processor utilization 有权
标题翻译：使用基于处理器利用率动态调整的反馈控制加权队列的分组转发
公开(公告)号：US08208406B1
公开(公告)日：2012-06-26
申请号：US12111996
申请日：2008-04-30
申请人： Dongyi Jiang , Chih-Wei Chao , David Yu , Jin Shang
发明人： Dongyi Jiang , Chih-Wei Chao , David Yu , Jin Shang
IPC分类号： H04L12/28
CPC分类号： H04L47/623
摘要： In general, techniques are described for dynamically managing weighted queues. In accordance with the techniques, a network security device comprises a queue management module that assigns, for each queue of a plurality of queues, a quota desirable to a user that a processor of the network security device consumes to service each queue. The queue management module determines, based on the desirable quotas, a queue weight for each queue and computes. Based on the computation, the queue management module dynamically adjusts one or more of the weights such that subsequent amounts of processing time actually required to process the number of packets defined by each of the queue weights more accurately reflects the desirable quotas assigned to each of the queues. The network device outputs the number of packets in accordance with the adjusted weights.
摘要翻译：一般来说，描述了用于动态管理加权队列的技术。根据这些技术，网络安全设备包括队列管理模块，其为多个队列的每个队列分配对网络安全设备的处理器消耗对每个队列服务的用户所需的配额。队列管理模块基于所需的配额来确定每个队列的队列权重并进行计算。基于该计算，队列管理模块动态地调整一个或多个权重，使得实际需要处理由每个队列权重定义的分组数量的后续处理时间量更准确地反映分配给每个队列权重的所需配额队列网络设备根据调整的权重输出数据包数。

5. 发明授权

US07941837B1 Layer two firewall with active-active high availability support 有权
标题翻译：第二层防火墙，主动主动高可用性支持
公开(公告)号：US07941837B1
公开(公告)日：2011-05-10
申请号：US11751731
申请日：2007-05-22
申请人： Dongyi Jiang , Chih-Wei Chao , Rakesh Nair , Daniel Hirschberg
发明人： Dongyi Jiang , Chih-Wei Chao , Rakesh Nair , Daniel Hirschberg
IPC分类号： G06F9/00
CPC分类号： H04L63/0209 , H04L63/0236
摘要： Techniques are described to enable two or more layer two (L2) firewall devices to be configured as a high availability (HA) cluster in an active-active configuration. A first layer two (L2) firewall and a second L2 firewall are positioned within the same L2 network. The first L2 firewall and the second L2 firewall are concurrently configured with active virtual security devices (VSDs) within the L2 network, and concurrently apply L2 firewall services to packets within the L2 network. A VSD of one of the L2 firewalls automatically switches to an active VSD status for a VSD group in place of a VSD of another L2 firewall when the other L2 firewall fails.
摘要翻译：描述技术以使得两个或多个第二层（L2）防火墙设备能够被配置为主动 - 主动配置中的高可用性（HA）群集。第一层二层（L2）防火墙和第二层L2防火墙位于同一L2网络内。第一个L2防火墙和第二个L2防火墙同时配置在L2网络内的主动虚拟安全设备（VSD），并对L2网络内的报文同时应用L2防火墙业务。当另一个L2防火墙发生故障时，其中一个L2防火墙的VSD自动切换到VSD组的主动VSD状态，代替另一个L2防火墙的VSD。

6. 发明申请

US20100161741A1 USING A SERVER'S CAPABILITY PROFILE TO ESTABLISH A CONNECTION 有权
标题翻译：使用服务器的能力配置文件建立连接
公开(公告)号：US20100161741A1
公开(公告)日：2010-06-24
申请号：US12343694
申请日：2008-12-24
申请人： Dongyi Jiang , Laxminarayana Tumuluru , Jianwen Pi
发明人： Dongyi Jiang , Laxminarayana Tumuluru , Jianwen Pi
IPC分类号： G06F15/16
CPC分类号： H04L67/42 , H04L63/02 , H04L67/14 , H04L67/2842 , H04L67/303 , H04L69/16
摘要： A network device connects between a client and a server. The network device is configured to store information regarding a capability of the server; receive a first message, from the client, intended for the server; obtain the stored information regarding the capability of the server; generate a second message that includes the information regarding the capability of the server; send the second message to the client; receive a third message from the client; and establish, based on the third message, a connection between the client and the server.
摘要翻译：网络设备在客户端和服务器之间连接。网络设备被配置为存储关于服务器的能力的信息; 从客户端接收针对服务器的第一条消息; 获取有关服务器能力的存储信息; 生成包括关于服务器的能力的信息的第二消息; 向客户发送第二条消息; 从客户端收到第三条消息; 并基于第三个消息建立客户端和服务器之间的连接。

7. 发明授权

US09100329B1 Providing non-interrupt failover using a link aggregation mechanism 有权
标题翻译：使用链路聚合机制提供非中断故障转移
公开(公告)号：US09100329B1
公开(公告)日：2015-08-04
申请号：US13536419
申请日：2012-06-28
申请人： Dongyi Jiang , Jin Shang , David Yu , Tsai-Zong Lin , Chih-Wei Chao
发明人： Dongyi Jiang , Jin Shang , David Yu , Tsai-Zong Lin , Chih-Wei Chao
IPC分类号： H04L12/26 , H04L12/707 , H04L12/703
CPC分类号： H04L45/28 , H04L41/0654 , H04L41/0663 , H04L45/22 , H04L45/74 , H04L49/557
摘要： A device receives traffic; identifies an address associated with the traffic; determines whether the address is associated with an aggregate interface, the aggregate interface being associated with a first port and a second port. The first port corresponds to a first node in a first state, that indicates that the first node is available to forward the traffic, and the second port corresponds to a second node in a second state, that indicates that that the second node is not available to forward the traffic. The device transmits the traffic to the first node via the first port and to the second node, via the second port, when the address is associated with the aggregate interface. Transmitting the traffic enables the second node to forward the traffic when the first node changes from the first state to the second state.
摘要翻译：设备接收流量; 识别与流量相关联的地址; 确定地址是否与聚合接口相关联，聚合接口与第一端口和第二端口相关联。第一端口对应于处于第一状态的第一节点，其指示第一节点可用于转发业务，并且第二端口对应于处于第二状态的第二节点，其指示第二节点不可用转发流量。当地址与聚合接口相关联时，设备经由第一端口向第一节点传送流量，并经由第二端口将流量发送到第二节点。当第一节点从第一状态改变到第二状态时，发送流量使得第二节点能够转发流量。

8. 发明授权

US08953599B1 Traffic cut-through within network device having multiple virtual network devices 有权
标题翻译：具有多个虚拟网络设备的网络设备内的流量切换
公开(公告)号：US08953599B1
公开(公告)日：2015-02-10
申请号：US13539120
申请日：2012-06-29
申请人： Colby Barth , Nischal Sheth , Nitin Kumar , Xuefei Zhang , Panning Huang , Raghavendra Mallya , Bhasker R. Allam , Krishna Narayanaswamy , Dongyi Jiang , Tsai-Zong Lin , Jiaxiang Su
发明人： Colby Barth , Nischal Sheth , Nitin Kumar , Xuefei Zhang , Panning Huang , Raghavendra Mallya , Bhasker R. Allam , Krishna Narayanaswamy , Dongyi Jiang , Tsai-Zong Lin , Jiaxiang Su
IPC分类号： H04L12/28 , H04L12/751
CPC分类号： H04L45/02 , H04L45/40 , H04L45/586 , H04L45/60
摘要： In general, techniques are for providing a direct forwarding path between virtual routers within a single virtualized routing system. In one example, a method includes combining forwarding information from a plurality of virtual routers into collapsed forwarding information that comprises one or more direct forwarding paths between the respective virtual routers. The method also includes determining a direct forwarding path to an egress interface of the second virtual router, in response to receiving a network packet at an ingress interface of a first virtual router. The method also includes forwarding the network packet from the ingress interface of the first virtual router to the egress interface of the second virtual router using the direct forwarding path, wherein the network packet traverses a switch fabric directly from the ingress interface of the first virtual router to the egress interface of the second virtual router.
摘要翻译：通常，技术用于在单个虚拟化路由系统内的虚拟路由器之间提供直接转发路径。在一个示例中，一种方法包括将来自多个虚拟路由器的转发信息组合成包括在各个虚拟路由器之间的一个或多个直接转发路径的折叠转发信息。响应于在第一虚拟路由器的入口接口处接收到网络分组，该方法还包括确定到第二虚拟路由器的出口接口的直接转发路径。该方法还包括使用直接转发路径将网络分组从第一虚拟路由器的入口接口转发到第二虚拟路由器的出口接口，其中网络分组从第一虚拟路由器的入口接口直接穿越交换结构到第二虚拟路由器的出口接口。

9. 发明授权

US08155150B1 Cooperative MAC learning/aging in highly distributed forwarding system 有权
标题翻译：高度分布式转发系统中的MAC学习/老化
公开(公告)号：US08155150B1
公开(公告)日：2012-04-10
申请号：US12401911
申请日：2009-03-11
申请人： Sammy Chung , Dongyi Jiang , Tsai-Zong Lin , Jin Shang , Anthony Ng
发明人： Sammy Chung , Dongyi Jiang , Tsai-Zong Lin , Jin Shang , Anthony Ng
IPC分类号： H04J3/24
CPC分类号： H04L12/433 , H04L12/462
摘要： A method may be performed by a device in a network, the device including multiple security process units (SPUs). The method includes receiving a packet over the network, the packet including a media access control (MAC) address, and assigning one SPU as the MAC address owner. The method also includes sending information about the MAC address to other SPUs within the device, storing the MAC address in a MAC table within each SPU, and initiating a MAC age query to confirm the MAC address has timed out among all SPUs. The MAC age query is passed via a logical ring of the SPUs beginning with the MAC address owner. If the MAC address is aged out at each SPU, the MAC address is deleted from each MAC table. If the MAC entry is still active, a different SPU is assigned as the MAC address owner.
摘要翻译：一种方法可以由网络中的设备执行，该设备包括多个安全处理单元（SPU）。该方法包括通过网络接收分组，所述分组包括媒体访问控制（MAC）地址，并且分配一个SPU作为MAC地址所有者。该方法还包括向设备内的其他SPU发送关于MAC地址的信息，将MAC地址存储在每个SPU内的MAC表中，以及启动MAC时间查询，以确认所有SPU中的MAC地址已经超时。通过从MAC地址所有者开始的SPU的逻辑环来传递MAC时长查询。如果MAC地址在每个SPU老化，则MAC地址从每个MAC表中删除。如果MAC表项仍然处于活动状态，则会分配不同的SPU作为MAC地址所有者。

10. 发明授权

US06857018B2 System, method and computer software products for network firewall fast policy look-up 失效
标题翻译：系统，方法和计算机软件产品为网络防火墙快速查询
公开(公告)号：US06857018B2
公开(公告)日：2005-02-15
申请号：US09919757
申请日：2001-08-01
申请人： Dongyi Jiang
发明人： Dongyi Jiang
IPC分类号： H04L29/06 , G06F15/173 , G06F15/16
CPC分类号： H04L63/0263
摘要： The present inventions provide a method for processing a table that includes a plurality of table entries with each entry providing data for defining a plurality of multiple-dimensional spaces. The method includes steps of A) assigning an ordered sequence number as a table entry counter ip to each of the table entries. B) Fragmenting the multiple-dimensional spaces into order spatial ranges and assigned each of the spatial ranges with a sequential spatial range-numbers. C) Forming multiple-dimensional range-spaces by employing the sequential spatial range-numbers as coordinates and assigning an associated table entry counter ip to each block defined by the spatial range-number coordinates for providing an index for correlating each of the sequential spatial range-numbers to the each of the table entry.
摘要翻译：本发明提供一种用于处理包括多个表条目的表的方法，每个条目提供用于定义多个多维空间的数据。该方法包括以下步骤：A）将有序序列号分配给每个表条目的表项计数器ip。 B）将多维空间分割成顺序的空间范围，并用顺序的空间范围数字分配每个空间范围。 C）通过使用顺序空间范围数字作为坐标来形成多维范围空间，并将相关联的表项计数器ip分配给由空间范围数坐标定义的每个块，以提供用于将每个顺序空间范围相关联的索引 - 每个表条目的数量。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式