会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 82. 发明授权
    • Architecture-aware allocation of network buffers
    • 网络缓冲区的架构感知分配
    • US08478877B2
    • 2013-07-02
    • US12711711
    • 2010-02-24
    • Nicolas G. DrouxSunay Tripathi
    • Nicolas G. DrouxSunay Tripathi
    • G06F15/16G06F12/00
    • H04L47/10H04L49/9047H04L69/32
    • A computer readable medium comprising software instructions for: obtaining an allocation policy by a MAC layer executing on a host; receiving, a request for a transmit kernel buffer (TxKB) by a sending application executing on at least one processor of the host; obtaining a location of a plurality of available TxKBs on the host; obtaining a location of at least one available network interface on the host; obtaining a location of the sending application; allocating one of the plurality of available TxKBs to obtain an allocated TxKB, wherein the one of the plurality of available TxKBs is selected according to the allocation policy using the location of the plurality of available TxKB, the location of the at least one available network interface, and the location of the sending application, to obtain an allocated TxKB; and providing, to the sending application, the location of the allocated TxKB.
    • 一种计算机可读介质,包括用于通过在主机上执行的MAC层获得分配策略的软件指令; 通过在所述主机的至少一个处理器上执行的发送应用来接收对发送内核缓冲器(TxKB)的请求; 获得主机上多个可用TxKB的位置; 获得主机上至少一个可用网络接口的位置; 获取发送应用程序的位置; 分配多个可用TxKB之一以获得分配的TxKB,其中根据分配策略选择多个可用TxKB之一,使用多个可用TxKB的位置,至少一个可用网络接口的位置 ,以及发送应用程序的位置,以获得分配的TxKB; 并向发送应用提供所分配的TxKB的位置。
    • 83. 发明授权
    • Method and apparatus for limiting denial of service attack by limiting traffic for hosts
    • 通过限制主机流量来限制拒绝服务攻击的方法和装置
    • US08312544B2
    • 2012-11-13
    • US12611467
    • 2009-11-03
    • Sunay TripathiNicolas G. DrouxYuzo Watanabe
    • Sunay TripathiNicolas G. DrouxYuzo Watanabe
    • G06F9/00G06F11/00
    • H04L63/1416H04L63/1458
    • A method for controlling a denial of service attack involves receiving a plurality of packets from a network, identifying an attacking host based on a severity level of the denial of service attack from the network, wherein the attacking host is identified by an identifying attack characteristic associated with one of the plurality of packets associated with the attacking host, analyzing each of the plurality of packets by a classifier to determine to which of a plurality of temporary data structures each of the plurality of packet is forwarded, forwarding each of the plurality of packets associated with the identifying attack characteristic to one of the plurality of temporary data structures matching the severity level of the denial of service attack as determined by the classifier, requesting a number of packets from the one of the plurality of temporary data structures matching the severity level by the virtual serialization queue, and forwarding the number of packets to the virtual serialization queue.
    • 用于控制拒绝服务攻击的方法包括从网络接收多个分组,基于来自网络的拒绝服务攻击的严重性级别识别攻击主机,其中攻击主机通过相关联的识别攻击特征来识别 与所述攻击主机相关联的所述多个分组中的一个分组,通过分类器分析所述多个分组中的每一个,以确定所述多个分组中的每一个被转发到多个临时数据结构中的哪一个,转发所述多个分组中的每个分组 与所述多个临时数据结构中的一个临时数据结构中的一个临时数据结构相关联,所述临时数据结构与由所述分类器确定的所述拒绝服务攻击的严重性级别匹配,请求从所述多个临时数据结构中的一个临时数据结构匹配严重性级别 通过虚拟序列化队列,并将数据包的数量转发到virtua l序列化队列
    • 84. 发明授权
    • Method and system for intra-host communication
    • 内部通信的方法和系统
    • US08254261B2
    • 2012-08-28
    • US12580382
    • 2009-10-16
    • Nicolas G. DrouxSunay Tripathi
    • Nicolas G. DrouxSunay Tripathi
    • G01R31/08G06F11/00G08C15/00H04J1/16H04J1/10H04J3/08H04J3/24H04J3/14H04L1/00H04L12/26H04L12/50H04L12/28H04L12/56H04B7/14H04W4/00H04Q11/00G06F15/16G06F15/173G06F15/177
    • H04L49/00G06F9/45558G06F2009/45595H04L49/70
    • A system including first and second virtualized execution environments and a hypervisor for sending packets between virtualized execution environments. The first virtualized execution environment includes a first VNIC associated with a first hardware address (HA), a first proxy VNIC associated with a second HA, and a virtual switch. A Vswitch table for the virtual switch includes entries associating the first HA with the first VNIC and the second HA with the first proxy VNIC. The second virtualized execution environment includes a second proxy VNIC associated with the first HA. The virtual switch receives a first packet associated with the second HA. The virtual switch sends the first packet to the first proxy VNIC when Vswitch table entry associates the second HA with the first proxy VNIC. The first VNIC proxy sends the first packet from the first virtualized execution environment to the second virtualized execution environment using the hypervisor.
    • 包括第一和第二虚拟化执行环境的系统和用于在虚拟化执行环境之间发送数据包的管理程序。 第一虚拟化执行环境包括与第一硬件地址(HA)相关联的第一VNIC,与第二HA相关联的第一代理VNIC和虚拟交换机。 用于虚拟交换机的Vswitch表包括将第一HA与第一VNIC和第二HA与第一代理VNIC相关联的条目。 第二虚拟化执行环境包括与第一HA相关联的第二代理VNIC。 虚拟交换机接收与第二HA相关联的第一分组。 当Vswitch表条目将第二个HA与第一个代理VNIC相关联时,虚拟交换机将第一个数据包发送到第一个代理VNIC。 第一个VNIC代理使用虚拟机管理程序将第一个数据包从第一个虚拟化执行环境发送到第二个虚拟化执行环境。
    • 86. 发明授权
    • Generalized serialization queue framework for protocol processing
    • 广义序列化队列框架进行协议处理
    • US07983266B2
    • 2011-07-19
    • US12581595
    • 2009-10-19
    • Thirumalai SrinivasanSunay TripathiNicolas G. Droux
    • Thirumalai SrinivasanSunay TripathiNicolas G. Droux
    • H04L12/56
    • H04L49/90H04L45/00H04L63/1458
    • A method for processing packets. The method includes receiving a first packet, wherein the first packet is associated with a first protocol, classifying the first packet using a protocol associated with the first packet, sending the first packet to a first receive ring based on the classification, sending the first packet from the first receive ring to a first virtual network interface card (VNIC) based on an operating mode, sending the first packet from the first VNIC to a first protocol specific virtual network stack (VNS), wherein the first protocol specific VNS is configured to only process packets associated with the first protocol, and processing the first packet by the first protocol specific VNS to obtain a first processed packet.
    • 一种处理数据包的方法。 该方法包括接收第一分组,其中第一分组与第一协议相关联,使用与第一分组相关联的协议对第一分组进行分类,基于分类将第一分组发送到第一接收环,发送第一分组 从所述第一接收环到基于操作模式的第一虚拟网络接口卡(VNIC),将所述第一分组从所述第一VNIC发送到第一协议特定虚拟网络栈(VNS),其中所述第一协议特定VNS被配置为 仅处理与第一协议相关联的分组,以及通过第一协议特定VNS处理第一分组以获得第一处理分组。
    • 87. 发明授权
    • Method and system for offloading network processing
    • 卸载网络处理的方法和系统
    • US07965714B2
    • 2011-06-21
    • US12040165
    • 2008-02-29
    • Sunay TripathiNicolas G. Droux
    • Sunay TripathiNicolas G. Droux
    • H04L12/28
    • H04L41/00H04L41/0806H04L45/00
    • The invention relates to a method for processing a packet. The method includes receiving the packet by a physical network interface, determining a target virtual network interface card (VNIC) using the destination address and a virtual switching table (VST), transferring the packet to a receive ring (RR) associated with the target VNIC, wherein the RR is located on the NEM, determining, by the target VNIC, that the packet is in the RR, determining, by the target VNIC, that the packet is to be processed using an offload engine, transferring the packet to offload memory located on an offload computer, wherein the offload computer is operatively connected to the NEM via the chassis interconnect and wherein the offload engine is executing on the offload computer, processing the packet by the offload engine to obtain a processed packet, and transferring the processed packet to a target computer memory using the chassis interconnect.
    • 本发明涉及一种处理数据包的方法。 该方法包括通过物理网络接口接收分组,使用目的地地址确定目标虚拟网络接口卡(VNIC)和虚拟交换表(VST),将分组传送到与目标VNIC相关联的接收环(RR) ,其中所述RR位于所述NEM上,由所述目标VNIC确定所述分组在所述RR中,由所述目标VNIC确定所述分组将使用卸载引擎进行处理,将所述分组传送到卸载存储器 位于卸载计算机上,其中所述卸载计算机经由所述机箱互连可操作地连接到所述NEM,并且其中所述卸载引擎在所述卸载计算机上执行,所述卸载引擎执行所述分组以获得经处理的分组,并且传送所述经处理的分组 使用机箱互连的目标计算机内存。
    • 88. 发明授权
    • Method and system for classifying network traffic
    • 分类网络流量的方法和系统
    • US07944923B2
    • 2011-05-17
    • US12053666
    • 2008-03-24
    • Sunay TripathiErik NordmarkNicolas G. Droux
    • Sunay TripathiErik NordmarkNicolas G. Droux
    • H04L12/28
    • H04L45/00H04L45/741H04L45/742
    • A system includes a physical NIC associated with the computer and including receive rings for storing network traffic addressed to the VNIC, where the receive rings include a local receive ring for storing local traffic and a forwarding receive ring for storing forwarding traffic. The physical NIC further includes a hardware classifier configured to register a local Internet Protocol (IP) address associated with the VNIC in a lookup table, receive a packet including a destination IP address, classify the packet as local traffic or forwarding traffic using the lookup table, and store the packet in the local receive ring or the forwarding receive ring based on the type. The VNIC is configured to retrieve the packet from the receive ring, and process the packet in a type-specific manner based on the receive ring where the packet was stored, where the type-specific manner is different for local traffic and forwarding traffic.
    • 系统包括与计算机相关联的物理NIC,并且包括用于存储寻址到VNIC的网络流量的接收环,其中接收环包括用于存储本地业务的本地接收环和用于存储转发业务的转发接收环。 物理NIC还包括硬件分类器,其被配置为在查找表中注册与VNIC相关联的本地互联网协议(IP)地址,接收包括目的地IP地址的分组,将分组分类为本地业务或使用查找表转发业务 并根据类型将数据包存储在本地接收环或转发接收环中。 VNIC被配置为从接收环检索数据包,并根据存储数据包的接收环以类型特定的方式处理数据包,其中类型特定的方式对于本地流量和转发流量是不同的。
    • 89. 发明授权
    • Multiple virtual network stack instances using virtual network interface cards
    • 使用虚拟网络接口卡的多个虚拟网络堆栈实例
    • US07885257B2
    • 2011-02-08
    • US11489942
    • 2006-07-20
    • Nicolas G. DrouxErik NordmarkSunay Tripathi
    • Nicolas G. DrouxErik NordmarkSunay Tripathi
    • H04L12/28
    • H04L12/4641
    • A method for processing packets that includes receiving a first packet for a first target by a network interface card (NIC), classifying the first packet, sending the first packet to a first receive ring in the NIC based on the classification of the first packet, sending the first packet to a Network Layer from the first receive ring, sending a first virtual network stack (VNS) Instance ID associated with the first receive ring to the Network Layer, obtaining a first VNS Instance parameter using the first VNS Instance ID, and processing the first packet in the Network Layer using the first VNS Instance parameter to obtain a first network processed packet.
    • 一种用于处理分组的方法,包括:通过网络接口卡(NIC)接收第一目标的第一分组,对所述第一分组进行分类,基于所述第一分组的分类将所述第一分组发送到所述NIC中的第一接收环; 从第一接收环发送第一分组到网络层,向网络层发送与第一接收环相关联的第一虚拟网络栈(VNS)实例ID,使用第一VNS实例ID获得第一VNS实例参数,以及 使用第一VNS实例参数来处理网络层中的第一个数据包,以获得第一个网络处理的数据包。