专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US08621105B2 Systems and methods for routing VPN traffic around network distribution 有权
标题翻译：围绕网络分布路由VPN流量的系统和方法
公开(公告)号：US08621105B2
公开(公告)日：2013-12-31
申请号：US13093703
申请日：2011-04-25
申请人： Josephine Suganthi , Junxiao He , Sergey Verzunov , Anil Shetty , Charu Venkatraman
发明人： Josephine Suganthi , Junxiao He , Sergey Verzunov , Anil Shetty , Charu Venkatraman
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L63/0272
摘要： Methods for using a client agent to route client requests among a plurality of appliances using transport layer information include the steps of: establishing, by a client agent executing on a client, a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers; establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of: the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.
摘要翻译：使用客户端代理使用传输层信息在多个设备之间路由客户端请求的方法包括以下步骤：由在客户端上执行的客户端代理建立与多个设备的第一设备的第一传输层连接，第一个设备提供对一个或多个服务器的访问; 由在客户端上执行的客户端代理建立与多个设备的第二设备的第二传输层连接，所述第二设备提供对一个或多个服务器的访问; 由客户端代理拦截客户端发送的数据包; 基于以下至少一个的特征，由所述客户端代理选择所述连接之一来发送所截取的分组：传输层连接，所述多个设备或所述服务器; 并通过所选择的连接发送截取的分组。

22. 发明申请

US20080034072A1 SYSTEMS AND METHODS FOR BYPASSING UNAVAILABLE APPLIANCE 有权
标题翻译：通过无线电器具的系统和方法
公开(公告)号：US20080034072A1
公开(公告)日：2008-02-07
申请号：US11462202
申请日：2006-08-03
申请人： Junxiao He , Josephine Suganthi , Sergey Verzunov , Anil Shetty , Charu Venkatraman
发明人： Junxiao He , Josephine Suganthi , Sergey Verzunov , Anil Shetty , Charu Venkatraman
IPC分类号： G06F15/173
CPC分类号： H04L41/5009 , H04L41/06 , H04L43/0811 , H04L67/1002 , H04L67/1008 , H04L67/1012 , H04L67/1029
摘要： Methods for redirecting, on a client, a communication of the client to a server to upon determining the server is not useable to communicate to the client include the steps of: establishing, by an client agent on a client, a transport layer connection between the client and an intermediary appliance, the intermediary appliance providing access to one or more servers; receiving, by the client agent from the intermediary appliance, address information identifying at least one of the one or more servers available to communicate; determining, by the client agent, the transport layer connection is unusable to communicate; establishing, by the client agent, a second transport layer connection between the client and one of the identified available servers to bypass the appliance. Corresponding systems are also described.
摘要翻译：在客户端上将客户端到服务器的通信重定向至一旦确定服务器的方法不能用于与客户端通信，包括以下步骤：由客户机上的客户端代理建立在客户端之间的传输层连接客户端和中间设备，中介设备提供对一个或多个服务器的访问; 由客户代理从中介设备接收识别可用于通信的一个或多个服务器中的至少一个的地址信息; 由客户端代理确定传输层连接不可用于通信; 由客户端代理建立客户端和所识别的可用服务器之一之间的第二传输层连接以绕过设备。还描述了相应的系统。

23. 发明授权

US08677007B2 Systems and methods for bypassing an appliance 有权
标题翻译：用于绕过设备的系统和方法
公开(公告)号：US08677007B2
公开(公告)日：2014-03-18
申请号：US11462202
申请日：2006-08-03
申请人： Junxiao He , Josephine Suganthi , Sergey Verzunov , Anil Shetty , Charu Venkatraman
发明人： Junxiao He , Josephine Suganthi , Sergey Verzunov , Anil Shetty , Charu Venkatraman
IPC分类号： G06F15/16
CPC分类号： H04L41/5009 , H04L41/06 , H04L43/0811 , H04L67/1002 , H04L67/1008 , H04L67/1012 , H04L67/1029
摘要： Methods for redirecting, on a client, a communication of the client to a server to upon determining the server is not useable to communicate to the client include the steps of: establishing, by an client agent on a client, a transport layer connection between the client and an intermediary appliance, the intermediary appliance providing access to one or more servers; receiving, by the client agent from the intermediary appliance, address information identifying at least one of the one or more servers available to communicate; determining, by the client agent, the transport layer connection is unusable to communicate; establishing, by the client agent, a second transport layer connection between the client and one of the identified available servers to bypass the appliance. Corresponding systems are also described.
摘要翻译：在客户端上将客户端到服务器的通信重定向至一旦确定服务器的方法不能用于与客户端通信，包括以下步骤：由客户机上的客户端代理建立在客户端之间的传输层连接客户端和中间设备，中介设备提供对一个或多个服务器的访问; 由客户代理从中介设备接收识别可用于通信的一个或多个服务器中的至少一个的地址信息; 由客户端代理确定传输层连接不可用于通信; 由客户端代理建立客户端和所识别的可用服务器之一之间的第二传输层连接以绕过设备。还描述了相应的系统。

24. 发明授权

US08769067B2 Systems and methods for statistics exchange between cores for load balancing 有权
标题翻译：用于负载平衡的内核之间进行统计交换的系统和方法
公开(公告)号：US08769067B2
公开(公告)日：2014-07-01
申请号：US12489249
申请日：2009-06-22
申请人： Murali Raja , Anil Shetty , Josephine Suganthi , Saravana Annamalaisami
发明人： Murali Raja , Anil Shetty , Josephine Suganthi , Saravana Annamalaisami
IPC分类号： G06F15/173
CPC分类号： H04L43/04 , H04L49/90
摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.
摘要翻译：公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。整合器可以向每个分组引擎发送消息以更新该组计数器值。合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

25. 发明授权

US08745266B2 Transparent layer 2 redirection of request to single sign in service based on applying policy to content of request 有权
标题翻译：透明层2根据对请求的内容应用策略，将请求重定向到单一登录服务
公开(公告)号：US08745266B2
公开(公告)日：2014-06-03
申请号：US13173216
申请日：2011-06-30
申请人： Mugdha Agarwal , Josephine Suganthi , Saravana Annamalaisami , Jyotheesh Rao Kurma , Deepak Goel , Anil Shetty
发明人： Mugdha Agarwal , Josephine Suganthi , Saravana Annamalaisami , Jyotheesh Rao Kurma , Deepak Goel , Anil Shetty
IPC分类号： G06F15/173
CPC分类号： H04L45/306 , H04L29/08 , H04L45/74 , H04L61/103 , H04L61/1511 , H04L63/02 , H04L63/0815 , H04L67/2814
摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.
摘要翻译：本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型以及本文描述的服务或设备的形式。中间设备可以选择机器来处理请求，并使用第2层重定向到机器。中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

26. 发明申请

US20100325263A1 SYSTEMS AND METHODS FOR STATISTICS EXCHANGE BETWEEN CORES FOR LOAD BALANCING 有权
标题翻译：用于负载平衡的CORS之间的统计交换的系统和方法
公开(公告)号：US20100325263A1
公开(公告)日：2010-12-23
申请号：US12489249
申请日：2009-06-22
申请人： Murali Raja , Anil Shetty , Josephine Suganthi , Saravana Annamalaisami
发明人： Murali Raja , Anil Shetty , Josephine Suganthi , Saravana Annamalaisami
IPC分类号： G06F15/173 , G06F1/12
CPC分类号： H04L43/04 , H04L49/90
摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.
摘要翻译：公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。整合器可以向每个分组引擎发送消息以更新该组计数器值。合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

27. 发明授权

US08949414B2 Systems and methods for scalable N-core stats aggregation 有权
标题翻译：可扩展N核统计聚合的系统和方法
公开(公告)号：US08949414B2
公开(公告)日：2015-02-03
申请号：US13337706
申请日：2011-12-27
申请人： Murali Raja , Sridhar Srinivasan , Saravana Annamalaisami , Devesh Prakash , Josephine Suganthi , Anil Shetty
发明人： Murali Raja , Sridhar Srinivasan , Saravana Annamalaisami , Devesh Prakash , Josephine Suganthi , Anil Shetty
IPC分类号： G06F15/173 , H04L12/26 , H04L29/06
CPC分类号： H04L43/028 , H04L29/06 , H04L43/00
摘要： The present invention is directed towards systems and methods for aggregating and providing statistics from cores of a multi-core system intermediary between one or more clients and servers. The system may maintain in shared memory a global device number for each core of the multi-core system. The system may provide a thread for each core of the multi-core system to gather data from the corresponding core. A first thread may generate aggregated statistics from a corresponding core by parsing the gathered data from the corresponding core. The first thread may transfer the generated statistics to a statistics log according to a schedule. The system may adaptively reschedule the transfer by monitoring the operation of each computing thread. Responsive to a request from a client, an agent of the client may obtain statistics from the statistics log.
摘要翻译：本发明涉及用于从一个或多个客户端和服务器之间的多核系统中介的核聚合和提供统计信息的系统和方法。该系统可以在共享存储器中维护多核系统的每个核心的全局设备号。系统可以为多核系统的每个核心提供线程，以从相应的核心收集数据。第一个线程可以通过从相应的核心解析收集的数据来从相应的核心生成聚合的统计信息。第一个线程可以根据时间表将生成的统计信息传输到统计日志。系统可以通过监视每个计算线程的操作来自适应地重新调度传输。响应于客户端的请求，客户端的代理可以从统计日志中获取统计信息。

28. 发明申请

US20130007239A1 SYSTEMS AND METHODS FOR TRANSPARENT LAYER 2 REDIRECTION TO ANY SERVICE 有权
标题翻译：透明层的系统和方法2重定向到任何服务
公开(公告)号：US20130007239A1
公开(公告)日：2013-01-03
申请号：US13173216
申请日：2011-06-30
申请人： Mugdha Agarwal , Josephine Suganthi , Saravana Annamalaisami , Jyotheesh Rao Kurma , Deepak Goel , Anil Shetty
发明人： Mugdha Agarwal , Josephine Suganthi , Saravana Annamalaisami , Jyotheesh Rao Kurma , Deepak Goel , Anil Shetty
IPC分类号： G06F15/173
CPC分类号： H04L45/306 , H04L29/08 , H04L45/74 , H04L61/103 , H04L61/1511 , H04L63/02 , H04L63/0815 , H04L67/2814
摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.
摘要翻译：本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型以及本文描述的服务或设备的形式。中间设备可以选择机器来处理请求，并使用第2层重定向到机器。中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

29. 发明申请

US20120226804A1 SYSTEMS AND METHODS FOR SCALABLE N-CORE STATS AGGREGATION 有权
标题翻译：用于可扩展N核心状态聚集的系统和方法
公开(公告)号：US20120226804A1
公开(公告)日：2012-09-06
申请号：US13337706
申请日：2011-12-27
申请人： Murali Raja , Sridhar Srinivasan , Saravana Annamalaisami , Devesh Prakash , Josephine Suganthi , Anil Shetty
发明人： Murali Raja , Sridhar Srinivasan , Saravana Annamalaisami , Devesh Prakash , Josephine Suganthi , Anil Shetty
IPC分类号： G06F15/173
CPC分类号： H04L43/028 , H04L29/06 , H04L43/00
摘要： The present invention is directed towards systems and methods for aggregating and providing statistics from cores of a multi-core system intermediary between one or more clients and servers. The system may maintain in shared memory a global device number for each core of the multi-core system. The system may provide a thread for each core of the multi-core system to gather data from the corresponding core. A first thread may generate aggregated statistics from a corresponding core by parsing the gathered data from the corresponding core. The first thread may transfer the generated statistics to a statistics log according to a schedule. The system may adaptively reschedule the transfer by monitoring the operation of each computing thread. Responsive to a request from a client, an agent of the client may obtain statistics from the statistics log.
摘要翻译：本发明涉及用于从一个或多个客户端和服务器之间的多核系统中介的核聚合和提供统计信息的系统和方法。该系统可以在共享存储器中维护多核系统的每个核心的全局设备号。系统可以为多核系统的每个核心提供线程，以从相应的核心收集数据。第一个线程可以通过从相应的核心解析收集的数据来从相应的核心生成聚合的统计信息。第一个线程可以根据时间表将生成的统计信息传输到统计日志。系统可以通过监视每个计算线程的操作来自适应地重新调度传输。响应于客户端的请求，客户端的代理可以从统计日志中获取统计信息。

30. 发明授权

US08493858B2 Systems and methods for providing dynamic connection spillover among virtual servers 有权
标题翻译：在虚拟服务器之间提供动态连接溢出的系统和方法
公开(公告)号：US08493858B2
公开(公告)日：2013-07-23
申请号：US11466238
申请日：2006-08-22
申请人： Sandeep Kamath , Josephine Suganthi , Sergey Verzunov , Anil Shetty
发明人： Sandeep Kamath , Josephine Suganthi , Sergey Verzunov , Anil Shetty
IPC分类号： G01R31/08 , G06F15/173 , G06F15/16
CPC分类号： H04L43/16 , H04L67/1002 , H04L67/1008 , H04L67/101 , H04L67/1012 , H04L67/1029 , H04L67/1031
摘要： A method for an appliance to switch handling of transport layer connection requests from a first virtual server of the appliance managing a first plurality of services to a second virtual server of the appliance managing a second plurality of services upon exceeding, by the first virtual server, a maximum connection threshold determined dynamically from a status of the first plurality of services. The method includes the steps of: establishing, on an appliance, a first virtual server which directs transport layer connection requests from a plurality of clients to a first plurality of services; establishing, via the appliance, a predetermined threshold identifying a maximum active transport layer connection capacity for the first virtual server, the predetermined threshold comprising a sum of a predetermined connection capacity for each of the plurality of services; monitoring, by the appliance, a status for each of the plurality of services; determining, by the appliance, the status of a service of the plurality of services indicates the service is not available; and adjusting, by the appliance in response to the determination, the predetermined threshold to comprise the sum of the predetermined connection capacity for each of the plurality of services having a status of available. Corresponding systems are also described.
摘要翻译：一种用于在由第一虚拟服务器超过第一虚拟服务器的情况下，设备将来自管理第一多个服务的设备的第一虚拟服务器的处理切换到设备的第二虚拟服务器的管理方法，从所述第一多个服务的状态动态地确定的最大连接阈值。该方法包括以下步骤：在设备上建立将来自多个客户端的传输层连接请求引导到第一多个服务的第一虚拟服务器; 通过所述设备建立标识所述第一虚拟服务器的最大活动传输层连接容量的预定阈值，所述预定阈值包括所述多个服务中的每一个的预定连接容量之和; 由所述设备监视所述多个服务中的每一个的状态; 由所述设备确定所述多个服务的服务的状态指示所述服务不可用; 以及响应于所述确定，由所述设备调整所述预定阈值以包括具有可用状态的所述多个服务中的每一个的预定连接容量之和。还描述了相应的系统。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式