专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20120230335A1 TRAFFIC DISTRIBUTION ACROSS A PLURALITY OF ATTACHMENT CIRCUITS OF A MULTIHOMED SITE 有权
标题翻译：多媒体站点的多媒体连接电路的交通分配
公开(公告)号：US20120230335A1
公开(公告)日：2012-09-13
申请号：US13045408
申请日：2011-03-10
申请人： Clarence Filsfils , Pradosh Mohapatra , Sami Boutros
发明人： Clarence Filsfils , Pradosh Mohapatra , Sami Boutros
IPC分类号： H04L12/56
CPC分类号： H04L45/38 , H04L45/7453
摘要： In one embodiment, an edge device of a core network may receive a plurality of packets from a peripheral network having a plurality of active connections to the core network, where each packet has a destination address and a source address. The edge device may compute a hash on the destination address or the source address of each packet, and determine whether the computed hash corresponds to the edge device. In response to the computed hash not corresponding to the edge device, the edge device may drop the packet, and in response to the computed hash corresponding to the edge device, the edge device may process the packet to forward the packet, where the dropping and processing load balances the plurality of packets over the active connections and prevents formation of loops in the core network.
摘要翻译：在一个实施例中，核心网络的边缘设备可以从具有到核心网络的多个活动连接的外围网络接收多个分组，其中每个分组具有目的地地址和源地址。边缘设备可以计算目的地址或每个分组的源地址上的散列，并确定所计算的散列是否对应于边缘设备。响应于不对应于边缘设备的计算哈希，边缘设备可以丢弃该分组，并且响应于与边缘设备相对应的计算出的哈希，边缘设备可以处理分组以转发分组，其中丢弃和处理负载通过主动连接来平衡多个分组，并且防止在核心网络中形成环路。

22. 发明申请

US20120036279A1 DISTRIBUTED CONNECTIVITY VERIFICATION PROTOCOL REDUNDANCY 有权
标题翻译：分布式连接验证协议冗余
公开(公告)号：US20120036279A1
公开(公告)日：2012-02-09
申请号：US12853006
申请日：2010-08-09
申请人： Sami Boutros , Sylvain Masse , Clarence Filsfils
发明人： Sami Boutros , Sylvain Masse , Clarence Filsfils
IPC分类号： G06F15/16
CPC分类号： H04L43/0811 , H04L41/0663 , H04L45/245 , H04L45/68 , H04L69/16 , Y02D50/30
摘要： In one embodiment, a connectivity verification protocol (CVP) session for a particular virtual interface (VI) may operate on a particular group of two or more line cards (LCs) on a network device. The group of LCs may then transmit CVP session packets, at a reduced rate that is sufficient to maintain the CVP session based on a negotiated CVP full rate, onto the particular VI through ingress path processing on the network device. Ingress path processing, in particular, takes transmitted CVP session packets and egresses them onto an appropriate LC of the network device currently responsible for the VI egress. Also, in response to receiving CVP session packets for the VI on an LC of the network device currently responsible for the VI ingress, the receiving LC may forward the received CVP session packets to the particular corresponding group of LCs, which may then process the received CVP session packets.
摘要翻译：在一个实施例中，用于特定虚拟接口（VI）的连接性验证协议（CVP）会话可以在网络设备上的两个或多个线路卡（LC）的特定组上操作。然后，LC组可以以足够的速率传输CVP会话分组，该速率足以通过协商的CVP全速率将CVP会话维持在通过网络设备上的入口路径处理的特定VI上。入口路径处理特别是将传输的CVP会话数据包发送到当前负责VI出口的网络设备的适当LC上。此外，响应于在当前负责VI入口的网络设备的LC上接收到针对VI的CVP会话分组，接收LC可以将接收的CVP会话分组转发到特定对应的LC组，然后可以处理接收的 CVP会话数据包。

23. 发明申请

US20110268130A1 Coordinated Updating of Forwarding Information Bases in a Multistage Packet Switching Device 有权
标题翻译：多级分组交换设备中转发信息库的协调更新
公开(公告)号：US20110268130A1
公开(公告)日：2011-11-03
申请号：US12769946
申请日：2010-04-29
申请人： Yuri Tsier , Parag Kumar Jain , Clarence Filsfils , Sami Boutros , John H. W. Bettink
发明人： Yuri Tsier , Parag Kumar Jain , Clarence Filsfils , Sami Boutros , John H. W. Bettink
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L45/02 , H04L49/253 , H04L49/3009
摘要： Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with the coordinated updating of forwarding information bases (FIBs) in a multistage packet switching device, which performs at least lookup operations on multiple different FIBs in determining how to forward a packet. One embodiment uses lookup operations on two different FIBs, with these being an ingress FIB on an ingress line card and an egress FIB on an egress line card. In response to a change in the forwarding information for a stream of packets, the egress FIBs are first updated to include both the old and new forwarding information. After all egress FIBs have been updated, the ingress FIBs are updated to use the new forwarding information. This update procedure is designed to eliminate loss or duplication of packets induced during the updating of these FIBs to use the new forwarding information.
摘要翻译：公开了尤其涉及在多级分组交换设备中与转发信息库（FIB）的协调更新相关联的方法，装置，计算机存储介质，机制和装置，其在多个不同的FIB中执行至少查找操作来确定如何转发数据包。一个实施例对两个不同的FIB进行查找操作，这些FIB是入口线卡上的入口FIB和出口线卡上的出口FIB。响应于分组流的转发信息的改变，首先更新出口FIB以包括旧的和新的转发信息。在所有出口FIB已被更新之后，入口FIB被更新以使用新的转发信息。该更新过程旨在消除在更新这些FIB期间引起的分组丢失或重复以使用新的转发信息。

24. 发明申请

US20100238812A1 Operating MPLS label switched paths and MPLS pseudowire in loopback mode 有权
标题翻译：在环回模式下运行MPLS标签交换路径和MPLS伪线
公开(公告)号：US20100238812A1
公开(公告)日：2010-09-23
申请号：US12383366
申请日：2009-03-23
申请人： Sami Boutros , Muthurajah Sivabalan , David D. Ward , George Swallow , Carlos M. Pignataro
发明人： Sami Boutros , Muthurajah Sivabalan , David D. Ward , George Swallow , Carlos M. Pignataro
IPC分类号： G06F11/30 , H04L12/56
CPC分类号： H04L43/50 , H04L45/00 , H04L45/20 , H04L45/50 , H04L45/68
摘要： In one embodiment, an initiating maintenance end point (MEP) may transmit a lock message to lock a circuit traversing one or more maintenance intermediate points (MIPs) between the initiating MEP and an end MEP. The initiating MEP may then transmit an in-band packet containing a loopback request to a particular MIP along the circuit using a particular time-to-live (TTL) value in the packet to reach the particular MIP. Upon receiving the packet at the particular MIP, and in response to determining that the TTL has expired, the particular MIP inspects the packet to discover the loopback request, and correspondingly operates in a loopback mode.
摘要翻译：在一个实施例中，启动维护端点（MEP）可以发送锁定消息以锁定经过起始MEP和结束MEP之间的一个或多个维护中间点（MIP）的电路。然后，启动MEP可以使用分组中的特定生存时间（TTL）值将包含环回请求的带内分组沿着电路发送到特定的MIP，以达到特定的MIP。在接收到特定MIP的分组时，响应于确定TTL已经到期，特定MIP检查分组以发现环回请求，并相应地以环回模式工作。

25. 发明授权

US07188363B1 Method and apparatus for adding and updating protocol inspection knowledge to firewall processing during runtime 有权
标题翻译：在运行时将协议检测知识添加和更新为防火墙处理的方法和装置
公开(公告)号：US07188363B1
公开(公告)日：2007-03-06
申请号：US09504005
申请日：2000-02-14
申请人： Sami Boutros , Steve H. Truong
发明人： Sami Boutros , Steve H. Truong
IPC分类号： G06F9/00 , G06F15/16 , G06F17/00
CPC分类号： H04L67/34 , H04L63/02
摘要： A method and apparatus for adding and updating protocol inspection knowledge/information to a firewall system during operation and without interrupting firewall services. The invention allows inspection modules, which contain protocol information, to be added and updated to the system without requiring a service restart of the firewall system.
摘要翻译：一种用于在运行期间向协议检查知识/信息添加和更新防火墙系统并且不中断防火墙服务的方法和装置。本发明允许将包含协议信息的检查模块添加并更新到系统，而不需要防火墙系统的服务重启。

26. 发明申请

US20060034251A1 Graceful shutdown of LDP on specific interfaces between label switched routers 有权
标题翻译：在标签交换路由器之间的特定接口上正常关闭LDP
公开(公告)号：US20060034251A1
公开(公告)日：2006-02-16
申请号：US10918089
申请日：2004-08-13
申请人： Muthurajah Sivabalan , Sami Boutros , David Ward , Syed Raza , Robert Thomas
发明人： Muthurajah Sivabalan , Sami Boutros , David Ward , Syed Raza , Robert Thomas
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L45/50
摘要： LDP label switching may be discontinued gracefully on one or more selected ones of multiple links interconnecting a pair of label switched routers (LSRs) while leaving label switching in operation on the remaining LDP-enabled links. Mechanisms for graceful shutdown of LDP on a selected link are added by way of modification to one or more of: e.g., LDP discovery Hello messages, LDP Label Withdraw/Label Release messages, LDP Notification messages.
摘要翻译： LDP标签交换可以在使一对标签交换路由器（LSR）互连的多个链路中的一个或多个选择的一个链路上正常停止，同时在剩余的启用LDP的链路上保持标签交换操作。通过修改LDP发现Hello消息，LDP标签提取/标签释放消息，LDP通知消息中的一个或多个来添加选定链路上的LDP正常关闭的机制。

27. 发明申请

US20050083928A1 Transparent re-routing of MPLS traffic engineering LSPs within a link bundle 有权
标题翻译：链路束内MPLS流量工程LSP的透明重路由
公开(公告)号：US20050083928A1
公开(公告)日：2005-04-21
申请号：US10689385
申请日：2003-10-20
申请人： Muthurajah Sivabalan , Rakesh Gandhi , Sami Boutros , Jean Vasseur
发明人： Muthurajah Sivabalan , Rakesh Gandhi , Sami Boutros , Jean Vasseur
IPC分类号： H04L12/56
CPC分类号： H04L45/245 , H04L45/00 , H04L45/22 , H04L45/28 , H04L45/50 , Y02D50/30
摘要： Local rerouting around a failed component link of a link bundle is provided by immediately substituting one or more other component links of the same link bundle. The substitution of component links is performed at the point of failure without signaling to other nodes. This minimizes signaling traffic particularly when large numbers of LSPs are impacted by a single component link failure. Also, since LSP repair can be accomplished very quickly, traffic disruption is minimized.
摘要翻译：通过立即替换相同链路束的一个或多个其他组件链路来提供围绕链路束的故障组件链路的本地重新路由。组件链路的替换在故障点执行，而不向其他节点发信号。这特别是当大量的LSP受到单个组件链路故障的影响时，信令流量最小化。此外，由于可以非常快速地完成LSP修复，所以流量中断被最小化。

28. 发明授权

US06854063B1 Method and apparatus for optimizing firewall processing 有权
标题翻译：优化防火墙处理的方法和装置
公开(公告)号：US06854063B1
公开(公告)日：2005-02-08
申请号：US09517961
申请日：2000-03-03
申请人： Diheng Qu , Kevin Li , Sami Boutros , Seren Fan , Steve Truong
发明人： Diheng Qu , Kevin Li , Sami Boutros , Seren Fan , Steve Truong
IPC分类号： H04L29/06 , G06F15/173 , G06F15/177 , H04L9/00 , H04L12/28 , H04L12/56
CPC分类号： H04L63/0245 , H04L63/0254 , H04L63/101
摘要： A firewall system and method which optimizes the performance of the firewall process by reducing overhead associated with ACL verification and firewall application-level authorization. The firewall system comprises a session manager operating in the firewall services component and a firewall module operating in the switching process component. In one embodiment, the firewall module is configured to provide certain “non-application” level inspection of data packets and update the context of “sessions” associated with the data packets without sending the packets to the firewall services component using session information provided by the session manager.
摘要翻译：防火墙系统和方法，通过减少与ACL验证和防火墙应用级授权相关的开销来优化防火墙进程的性能。防火墙系统包括在防火墙服务组件中操作的会话管理器和在切换过程组件中操作的防火墙模块。在一个实施例中，防火墙模块被配置为提供数据分组的某些“非应用”级别检查，并且更新与数据分组相关联的“会话”的上下文，而不会使用由所述数据分组提供的会话信息将分组发送到防火墙服务组件会话经理。

29. 发明授权

US08850062B2 Distributed connectivity verification protocol redundancy 有权
标题翻译：分布式连接验证协议冗余
公开(公告)号：US08850062B2
公开(公告)日：2014-09-30
申请号：US12853006
申请日：2010-08-09
申请人： Sami Boutros , Sylvain Masse , Clarence Filsfils
发明人： Sami Boutros , Sylvain Masse , Clarence Filsfils
IPC分类号： G06F15/16 , G06F15/173 , H04L12/26 , H04L12/721 , H04L12/709 , H04L12/24
CPC分类号： H04L43/0811 , H04L41/0663 , H04L45/245 , H04L45/68 , H04L69/16 , Y02D50/30
摘要： In one embodiment, a connectivity verification protocol (CVP) session for a particular virtual interface (VI) may operate on a particular group of two or more line cards (LCs) on a network device. The group of LCs may then transmit CVP session packets, at a reduced rate that is sufficient to maintain the CVP session based on a negotiated CVP full rate, onto the particular VI through ingress path processing on the network device. Ingress path processing, in particular, takes transmitted CVP session packets and egresses them onto an appropriate LC of the network device currently responsible for the VI egress. Also, in response to receiving CVP session packets for the VI on an LC of the network device currently responsible for the VI ingress, the receiving LC may forward the received CVP session packets to the particular corresponding group of LCs, which may then process the received CVP session packets.
摘要翻译：在一个实施例中，用于特定虚拟接口（VI）的连接性验证协议（CVP）会话可以在网络设备上的两个或多个线路卡（LC）的特定组上操作。然后，LC组可以以足够的速率传输CVP会话分组，该速率足以基于协商的CVP全速率将CVP会话维持在通过网络设备上的入口路径处理的特定VI上。入口路径处理特别是将传输的CVP会话数据包发送到当前负责VI出口的网络设备的适当LC上。此外，响应于在当前负责VI入口的网络设备的LC上接收到针对VI的CVP会话分组，接收LC可以将接收到的CVP会话分组转发到特定对应的LC组，然后可以处理接收的 CVP会话数据包。

30. 发明授权

US08848716B2 Termination of a pseudowires on multiple line cards 有权
标题翻译：在多个线卡上终止伪线
公开(公告)号：US08848716B2
公开(公告)日：2014-09-30
申请号：US13084531
申请日：2011-04-11
申请人： Vijayan Ramakrishnan , Sami Boutros , Leo Chun-Chuen Chan , Reshad Rahman , Sundar Siddaramaiah Bettadahalli , Sivakumar Subramaniyan Ganapathy
发明人： Vijayan Ramakrishnan , Sami Boutros , Leo Chun-Chuen Chan , Reshad Rahman , Sundar Siddaramaiah Bettadahalli , Sivakumar Subramaniyan Ganapathy
IPC分类号： H04L12/28 , H04L12/56 , G06F15/16
CPC分类号： H04L45/68
摘要： In one embodiment, line cards of packet switching or other network devices are configured for terminating pseudowires. Typically, this includes multiple line cards being configured for terminating a same pseudowire, which allows the corresponding pseudowire traffic to be received by any one of these multiple line cards. Each of these pseudowire-terminating line cards is typically configured to apply one or more features to a pseudowire packet. Examples of these features include, but are not limited to: Access Control List, Quality of Service, Netflow, and Lawful Intercept. For a received packet to be sent out one of these pseudowires, a two-stage lookup operation can be used to first identify the pseudowire over which to forward the packet; and a second lookup operation based on the pseudowire to identify forwarding information corresponding to a path through a network over which a corresponding pseudowire is configured.
摘要翻译：在一个实施例中，分组交换或其他网络设备的线路卡被配置用于终止伪线。通常，这包括配置用于终止相同伪线的多个线卡，这允许相应的伪线路业务由这些多个线卡中的任一个接收。这些伪线终端线卡中的每一个通常被配置为将一个或多个特征应用于伪线分组。这些功能的示例包括但不限于：访问控制列表，服务质量，Netflow和合法拦截。对于要发送出这些伪线中的一个的接收分组，可以使用两阶段查找操作来首先识别用于转发分组的伪线; 以及基于伪线的第二查找操作，以识别与通过其配置相应伪线的网络相对应的路径的转发信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式