专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08954957B2 Network traffic processing according to network traffic rule criteria and transferring network traffic metadata in a network device that includes hosted virtual machines 有权
标题翻译：根据网络流量规则标准进行网络流量处理，并在包括托管虚拟机的网络设备中传送网络流量元数据
公开(公告)号：US08954957B2
公开(公告)日：2015-02-10
申请号：US12496430
申请日：2009-07-01
申请人： David Tze-Si Wu , Kand Ly , Lap Nathan Trac , Alexei Potashnik
发明人： David Tze-Si Wu , Kand Ly , Lap Nathan Trac , Alexei Potashnik
IPC分类号： G06F9/455 , G06F15/173 , H04L12/46 , H04L12/931
CPC分类号： H04L12/4625 , G06F9/45558 , G06F2009/45595 , H04L49/70
摘要： Network devices include hosted virtual machines and virtual machine applications. Hosted virtual machines and their applications implement additional functions and services in network devices. Network devices include data taps for directing network traffic to hosted virtual machines and allowing hosted virtual machines to inject network traffic. Network devices include unidirectional data flow specifications, referred to as hyperswitches. Each hyperswitch is associated with a hosted virtual machine and receives network traffic received by the network device from a single direction. Each hyperswitch processes network traffic according to rules and rule criteria. A hosted virtual machine can be associated with multiple hyperswitches, thereby independently specifying the data flow of network traffic to and from the hosted virtual machine from multiple networks. The network device architecture also enables the communication of additional information between the network device and one or more virtual machine applications using an extended non-standard network protocol.
摘要翻译：网络设备包括托管虚拟机和虚拟机应用程序。托管虚拟机及其应用程序在网络设备中实现附加功能和服务。网络设备包括用于将网络流量引导到托管虚拟机并允许托管虚拟机注入网络流量的数据分接头。网络设备包括单向数据流规范，称为超开关。每个超级交换机与托管虚拟机相关联，并从单个方向接收网络设备接收的网络流量。每个超级交换机根据规则和规则标准处理网络流量。托管的虚拟机可以与多个超级交换机相关联，从而独立地指定来自多个网络的托管虚拟机的网络流量的数据流。网络设备架构还使得能够使用扩展的非标准网络协议在网络设备和一个或多个虚拟机应用之间进行附加信息的通信。

2. 发明申请

US20110004876A1 Network Traffic Processing Pipeline for Virtual Machines in a Network Device 有权
标题翻译：网络设备中虚拟机的网络流量处理流水线
公开(公告)号：US20110004876A1
公开(公告)日：2011-01-06
申请号：US12496430
申请日：2009-07-01
申请人： David Tze-Si Wu , Kand Ly , Lap Nathan Trac , Alexei Potashnik
发明人： David Tze-Si Wu , Kand Ly , Lap Nathan Trac , Alexei Potashnik
IPC分类号： G06F9/455 , G06F15/173
CPC分类号： H04L12/4625 , G06F9/45558 , G06F2009/45595 , H04L49/70
摘要： Network devices include hosted virtual machines and virtual machine applications. Hosted virtual machines and their applications implement additional functions and services in network devices. Network devices include data taps for directing network traffic to hosted virtual machines and allowing hosted virtual machines to inject network traffic. Network devices include unidirectional data flow specifications, referred to as hyperswitches. Each hyperswitch is associated with a hosted virtual machine and receives network traffic received by the network device from a single direction. Each hyperswitch processes network traffic according to rules and rule criteria. A hosted virtual machine can be associated with multiple hyperswitches, thereby independently specifying the data flow of network traffic to and from the hosted virtual machine from multiple networks. The network device architecture also enables the communication of additional information between the network device and one or more virtual machine applications using an extended non-standard network protocol.
摘要翻译：网络设备包括托管虚拟机和虚拟机应用程序。托管虚拟机及其应用程序在网络设备中实现附加功能和服务。网络设备包括用于将网络流量引导到托管虚拟机并允许托管虚拟机注入网络流量的数据分接头。网络设备包括单向数据流规范，称为超开关。每个超级交换机与托管虚拟机相关联，并从单个方向接收网络设备接收的网络流量。每个超级交换机根据规则和规则标准处理网络流量。托管的虚拟机可以与多个超级交换机相关联，从而独立地指定来自多个网络的托管虚拟机的网络流量的数据流。网络设备架构还使得能够使用扩展的非标准网络协议在网络设备和一个或多个虚拟机应用之间进行附加信息的通信。

3. 发明授权

US08411570B2 Serial clustering 有权
公开(公告)号：US08411570B2
公开(公告)日：2013-04-02
申请号：US11494352
申请日：2006-07-26
申请人： David Tze-Si Wu , Nitin Gupta , Kand Ly
发明人： David Tze-Si Wu , Nitin Gupta , Kand Ly
IPC分类号： H04L12/26
CPC分类号： H04L47/12 , H04L47/10 , H04L47/125 , H04L69/16 , H04L69/162 , H04L69/165 , H04L69/32
摘要： Serial clustering uses two or more network devices connected in series via a local and/or wide-area network to provide additional capacity when network traffic exceeds the processing capabilities of a single network device. When a first network device reaches its capacity limit, any excess network traffic beyond that limit is passed through the first network device unchanged. A network device connected in series with the first network device intercepts and will process the excess network traffic provided that it has sufficient processing capacity. Additional network devices can process remaining network traffic in a similar manner until all of the excess network traffic has been processed or until there are no more additional network devices. Network devices may use rules to determine how to handle network traffic. Rules may be based on the attributes of received network packets, attributes of the network device, or attributes of the network.

4. 发明授权

US08739244B1 Configuring and authenticating WAN optimization devices for accessing content delivery networks 有权
标题翻译：配置和验证用于访问内容传送网络的WAN优化设备
公开(公告)号：US08739244B1
公开(公告)日：2014-05-27
申请号：US13249195
申请日：2011-09-29
申请人： David Tze-Si Wu , John S. Cho , Kand Ly
发明人： David Tze-Si Wu , John S. Cho , Kand Ly
IPC分类号： H04L29/06 , G06F21/00
CPC分类号： H04L69/04 , H04L67/2847
摘要： WAN optimization devices and content delivery networks together optimize network traffic on both private networks and public WANs such as the internet. A WAN optimization device intercepts and optimizes network traffic from clients within a private network. The WAN optimization device communicates this first optimized network traffic to the nearest edge computer in the content delivery network via a public WAN, such as the internet. This edge computer further optimizes the network traffic and communicates the doubly optimized network traffic via the content delivery network to a second edge computer nearest to the network traffic destination. The second edge computer converts the doubly optimized network traffic back to its original format and communicates the reconstructed network traffic from the second edge computer to the destination via a public WAN. Licensing and configuration portals configure WAN optimization devices for specific network protocols, types of network traffic, applications, and/or cloud services.
摘要翻译： WAN优化设备和内容传送网络一起优化了私有网络和公共WAN（如互联网）上的网络流量。 WAN优化设备拦截并优化来自私有网络内客户端的网络流量。 WAN优化设备经由诸如因特网的公共WAN将该第一优化网络流量传送到内容传送网络中的最近边缘计算机。该边缘计算机进一步优化网络流量，并将经双向优化的网络流量通过内容传送网络传送到最靠近网络流量目的地的第二边缘计算机。第二边缘计算机将双重优化的网络业务转换回其原始格式，并通过公共WAN将重建的网络流量从第二边缘计算机传送到目的地。许可和配置门户为特定网络协议，网络流量类型，应用程序和/或云服务配置WAN优化设备。

5. 发明授权

US08843636B1 Managing digital certificates for WAN optimization over content delivery networks 有权
标题翻译：通过内容传送网络管理WAN优化的数字证书
公开(公告)号：US08843636B1
公开(公告)日：2014-09-23
申请号：US13341825
申请日：2011-12-30
申请人： David Tze-Si Wu , John S. Cho , Kand Ly
发明人： David Tze-Si Wu , John S. Cho , Kand Ly
IPC分类号： G06F15/16
CPC分类号： H04L69/04 , H04L67/2847
摘要： Digital certificates are distributed to WAN optimization modules in organization and content delivery networks to securely optimize network traffic. The content delivery network identifies edge WAN optimization modules for use with each combination of organizations and their cloud services and distributes digital certificates accordingly. Peering digital certificates for establishing inner connections between organization and edge WAN optimization modules are exchanged via one or more management portals. Shadow digital certificates for establishing outer connections between WAN optimization modules and clients are generated in the form of certificate signing requests. Configuration information identifies any additional cloud services associated with a given cloud service and generate corresponding additional certificate signing requests. Certificate signing requests are digitally signed by a certificate signing authority associated with the organization and then returned via the one or more management portals to the allocated edge WAN optimization modules. Digital certificates may be rotated for security purposes.
摘要翻译：数字证书分发到组织和内容传送网络中的WAN优化模块，以安全地优化网络流量。内容传送网络识别边缘WAN优化模块，用于组织的每个组合及其云服务，并相应地分发数字证书。通过一个或多个管理门户交换用于建立组织和边缘WAN优化模块之间内部连接的数字证书。用于在WAN优化模块和客户端之间建立外部连接的影子数字证书以证书签名请求的形式生成。配置信息标识与给定云服务相关联的任何其他云服务，并生成相应的其他证书签名请求。证书签名请求由与组织相关联的证书签发机构进行数字签名，然后通过一个或多个管理门户返回到分配的边缘WAN优化模块。为了安全起见，数字证书可以旋转。

6. 发明授权

US08516158B1 Integrating WAN optimization devices with content delivery networks 有权
标题翻译：将WAN优化设备与内容传送网络集成
公开(公告)号：US08516158B1
公开(公告)日：2013-08-20
申请号：US13249201
申请日：2011-09-29
申请人： David Tze-Si Wu , John S. Cho , Kand Ly
发明人： David Tze-Si Wu , John S. Cho , Kand Ly
IPC分类号： G06F15/16
CPC分类号： H04L69/04 , H04L67/2847
摘要： WAN optimization devices and content delivery networks together optimize network traffic on both private networks and public WANs such as the internet. A WAN optimization device intercepts and optimizes network traffic from clients within a private network. The WAN optimization device communicates this first optimized network traffic to the nearest edge computer in the content delivery network via a public WAN, such as the internet. This edge computer further optimizes the network traffic and communicates the doubly optimized network traffic via the content delivery network to a second edge computer nearest to the network traffic destination. The second edge computer converts the doubly optimized network traffic back to its original format and communicates the reconstructed network traffic from the second edge computer to the destination via a public WAN. Licensing and configuration portals configure WAN optimization devices for specific network protocols, types of network traffic, applications, and/or cloud services.
摘要翻译： WAN优化设备和内容传送网络一起优化了私有网络和公共WAN（如互联网）上的网络流量。 WAN优化设备拦截并优化来自私有网络内客户端的网络流量。 WAN优化设备经由诸如因特网的公共WAN将该第一优化网络流量传送到内容传送网络中的最近边缘计算机。该边缘计算机进一步优化网络流量，并将经双向优化的网络流量通过内容传送网络传送到最靠近网络流量目的地的第二边缘计算机。第二边缘计算机将双重优化的网络业务转换回其原始格式，并通过公共WAN将重建的网络流量从第二边缘计算机传送到目的地。许可和配置门户为特定网络协议，网络流量类型，应用程序和/或云服务配置WAN优化设备。

7. 发明申请

US20130091273A1 Cooperative Proxy Auto-Discovery and Connection Interception Through Network Address Translation 有权
标题翻译：通过网络地址转换协同代理自动发现和连接拦截
公开(公告)号：US20130091273A1
公开(公告)日：2013-04-11
申请号：US13436873
申请日：2012-03-31
申请人： Kand Ly , Michael J. Demmer , Steven McCanne , Alfred Landrum
发明人： Kand Ly , Michael J. Demmer , Steven McCanne , Alfred Landrum
IPC分类号： H04L12/24
CPC分类号： H04L41/00 , H04L41/0663 , H04L43/10 , H04L61/2514 , H04L61/2567 , H04L61/2589 , H04L67/146 , H04L67/147 , H04L67/16 , H04L67/28 , H04L67/2804 , H04L67/2819 , H04L67/2842
摘要： Proxy devices associate their direct connection with a client/server connection passing through one or more NAT devices. First proxy device receives a network connection request from a client. First proxy device stores connection information in association with a connection identifier. Connection information may reflect the usage of NAT devices between the two proxy devices. First proxy device sends a connection response including the connection identifier to the client. Second proxy device sends a direct connection request to first proxy device to establish a direct connection. Direct connection request includes the connection identifier, which is used by first proxy device to associate the direct connection with stored connection information. First proxy device may use the connection information to direct network traffic received via this direct connection to the correct destination and to divert network traffic from the server to the client through the direct connection and first and second proxy devices.
摘要翻译：代理设备将其直接连接与通过一个或多个NAT设备的客户端/服务器连接相关联。第一代理设备从客户端接收网络连接请求。第一代理设备存储与连接标识符相关联的连接信息。连接信息可能反映NAT设备在两个代理设备之间的使用情况。第一代理设备向客户端发送包括连接标识符的连接响应。第二代理设备向第一代理设备发送直接连接请求以建立直接连接。直接连接请求包括连接标识符，第一代理设备使用该标识符将直接连接与存储的连接信息相关联。第一代理设备可以使用连接信息将通过该直接连接接收的网络流量定向到正确的目的地，并且通过直接连接和第一和第二代理设备将网络流量从服务器转移到客户端。

8. 发明申请

US20090094371A1 CONNECTION FORWARDING 有权
标题翻译：连接前进
公开(公告)号：US20090094371A1
公开(公告)日：2009-04-09
申请号：US12331257
申请日：2008-12-09
申请人： Kand Ly , Joshua Tseng , Steve McCanne
发明人： Kand Ly , Joshua Tseng , Steve McCanne
IPC分类号： G06F15/16
CPC分类号： H04L67/14 , H04L67/2814 , H04L67/2876
摘要： Two or more network traffic processors connected with the same LAN and WAN are identified as neighbors. Neighboring network traffic processors cooperate to overcome asymmetric routing, thereby ensuring that related sequences of network traffic are processed by the same network proxy. A network proxy can be included in a network traffic processor or as a standalone unit. A network traffic processor that intercepts a new connection initiation by a client assigns a network proxy to handle all messages associated with that connection. The network traffic processor conveys connection information to neighboring network traffic processors. The neighboring network traffic processors use the connection information to redirect network traffic associated with the connection to the assigned network proxy, thereby overcoming the effects of asymmetric routing. The assigned network proxy handles redirected network traffic in much the same way that it would handle network traffic received directly.
摘要翻译：与同一LAN和WAN连接的两个或多个网络流量处理器被识别为邻居。相邻的网络流量处理器合作克服非对称路由，从而确保相同的网络流量的相关序列被相同的网络代理处理。网络代理可以包含在网络流量处理器中或独立的单元中。拦截客户端的新连接启动的网络流量处理器分配网络代理来处理与该连接相关联的所有消息。网络流量处理器将连接信息传递给相邻网络流量处理器。相邻网络流量处理器使用连接信息将与连接相关联的网络流量重定向到所分配的网络代理，从而克服非对称路由的影响。分配的网络代理以与处理直接接收的网络流量大致相同的方式处理重定向的网络流量。

9. 发明申请

US20060248194A1 Connection forwarding 审中-公开
公开(公告)号：US20060248194A1
公开(公告)日：2006-11-02
申请号：US11377906
申请日：2006-03-15
申请人： Kand Ly , Joshua Tseng , Steve McCanne
发明人： Kand Ly , Joshua Tseng , Steve McCanne
IPC分类号： G06F15/173
CPC分类号： H04L67/14 , H04L67/2814 , H04L67/2876
摘要： Two or more network traffic processors connected with the same LAN and WAN are identified as neighbors. Neighboring network traffic processors cooperate to overcome asymmetric routing, thereby ensuring that related sequences of network traffic are processed by the same network proxy. A network proxy can be included in a network traffic processor or as a standalone unit. A network traffic processor that intercepts a new connection initiation by a client assigns a network proxy to handle all messages associated with that connection. The network traffic processor conveys connection information to neighboring network traffic processors. The neighboring network traffic processors use the connection information to redirect network traffic associated with the connection to the assigned network proxy, thereby overcoming the effects of asymmetric routing. The assigned network proxy handles redirected network traffic in much the same way that it would handle network traffic received directly.

10. 发明申请

US20100318665A1 INTERCEPTION OF A CLOUD-BASED COMMUNICATION CONNECTION 有权
标题翻译：拦截基于云的通信连接
公开(公告)号：US20100318665A1
公开(公告)日：2010-12-16
申请号：US12843754
申请日：2010-07-26
申请人： Michael J. Demmer , Kand Ly , Nitin Gupta
发明人： Michael J. Demmer , Kand Ly , Nitin Gupta
IPC分类号： G06F15/16
CPC分类号： H04L67/14 , H04L29/12367 , H04L41/12 , H04L61/2514 , H04L67/2876 , H04L69/16 , H04L69/163 , H04L69/329 , H04L69/40
摘要： Methods and apparatus are provided for intercepting a client-server communication connection in a computing environment. A first network intermediary configured to facilitate optimization of client-server transactions may be installed in a path of communications between the client and the server. A second network intermediary configured to cooperate with the first network intermediary is not in the path of communications between the client and the server. The first network intermediary intercepts a connection request from the client and forwards a modified request toward the server. A module within the server intercepts the connection request and redirects it to the second network intermediary. The client-server connection is thus split-terminated at the two network intermediaries, which establish cooperative sessions between themselves and with the client and with the server.
摘要翻译：提供了用于在计算环境中拦截客户机 - 服务器通信连接的方法和装置。配置为促进客户端 - 服务器事务的优化的第一网络中介可以安装在客户机和服务器之间的通信路径中。配置为与第一网络中介进行协作的第二网络中介不在客户端和服务器之间的通信路径中。第一个网络中介拦截来自客户端的连接请求，并向服务器转发修改的请求。服务器内的一个模块拦截连接请求并将其重定向到第二个网络中介。因此，客户机 - 服务器连接在两个网络中间件上分拆终止，这两个中间件在它们之间以及与客户端和服务器之间建立协作会话。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式