专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10708393B1 Stateless communication using a stateful protocol 有权
公开(公告)号：US10708393B1
公开(公告)日：2020-07-07
申请号：US16119985
申请日：2018-08-31
申请人： F5 Networks, Inc.
发明人： Peter Michael Thornewell , John Francis Tavares , Robert Andrew Kovalchik
IPC分类号： G06F15/16 , H04L29/06 , H04L12/823 , H04L29/08
摘要： Embodiments are directed to stateless communication using a stateful protocol. One or more NTMAs may establish a connection with a client computer based on data exchanged with a the client computer using the stateful protocol. The exchanged data may include validation information provided by the one or more NTMAs. The exchanged data and other information associated with the connection may be discarded from one or more memories of the one or more NTMAs. A network packet communicated over the network using the stateful protocol may be obtained. Verification information and candidate validation information may be generated based on one or more characteristics of the network packet. The network packet may be validated based on a comparison of the verification information and the candidate validation information. A reply that adheres to the stateful protocol may be provided to the client computer based on the validated network packet.

2. 发明授权

US11457095B1 Stateless communication using a stateful protocol 有权
公开(公告)号：US11457095B1
公开(公告)日：2022-09-27
申请号：US16916861
申请日：2020-06-30
申请人： F5 Networks, Inc.
发明人： Peter Michael Thornewell , John Francis Tavares , Robert Andrew Kovalchik
IPC分类号： G06F15/173 , H04L69/16 , H04L9/40 , H04L67/14 , H04L47/32
摘要： Embodiments are directed to stateless communication using a stateful protocol. One or more NTMAs may establish a connection with a client computer based on data exchanged with a the client computer using the stateful protocol. The exchanged data may include validation information provided by the one or more NTMAs. The exchanged data and other information associated with the connection may be discarded from one or more memories of the one or more NTMAs. A network packet communicated over the network using the stateful protocol may be obtained. Verification information and candidate validation information may be generated based on one or more characteristics of the network packet. The network packet may be validated based on a comparison of the verification information and the candidate validation information. A reply that adheres to the stateful protocol may be provided to the client computer based on the validated network packet.

3. 发明授权

US09154423B1 Minimize SYN-flood issues with flow cache while maintaining performance 有权
标题翻译：在保持性能的同时最大限度地减少流缓存的SYN-flood问题
公开(公告)号：US09154423B1
公开(公告)日：2015-10-06
申请号：US13802169
申请日：2013-03-13
申请人： F5 Networks, Inc.
发明人： Paul Imre Szabo , Peter Michael Thornewell , Timothy Scott Michels , Hao Cai
IPC分类号： H04L12/801 , H04L12/803 , H04W28/02 , H04W28/10
CPC分类号： H04W28/10 , H04L47/10 , H04L47/2441 , H04L63/1458 , H04W28/02
摘要： Embodiments are directed towards minimizing the impact flood attacks may have on packet traffic management performance. A packet traffic management device (“PTMD”) may employ a data flow segment (“DFS”) and control segment (“CS”). The CS may perform high-level control functions and per-flow policy enforcement for connection flows maintained at the DFS, while the DFS may perform statistics gathering, per-packet policy enforcement (e.g., packet address translations), or the like, on connection flows maintained at the DFS. The DFS may include high-speed flow caches and other high-speed components that may be comprised of high-performance computer memory. The impact of flood attacks may be reduced by protecting the high-speed flow caches from being consumed by flow control data associated with malicious and/or in-operative non-genuine network connections. In at least one of the various embodiments, flood control filters may be adaptively activated based on the condition and quality of network traffic received at PTMD.
摘要翻译：实施例旨在最小化泛洪攻击可能对分组流量管理性能的影响。分组业务管理设备（“PTMD”）可以使用数据流分段（“DFS”）和控制段（“CS”）。 CS可以对在DFS上维护的连接流执行高级控制功能和每流策略执行，而DFS可以在连接时执行统计收集，每个分组策略执行（例如，分组地址转换）等流量维持在DFS。 DFS可以包括可能由高性能计算机存储器组成的高速流高速缓存和其他高速组件。洪水攻击的影响可以通过保护高速流高速缓存免受与恶意和/或在操作非真正网络连接相关联的流量控制数据的影响而降低。在各种实施例中的至少一个实施例中，可以基于在PTMD处接收到的网络流量的条件和质量自适应地激活洪水控制滤波器。

4. 发明授权

US10389611B2 Inserting and removing stateful devices in a network 有权
公开(公告)号：US10389611B2
公开(公告)日：2019-08-20
申请号：US15389309
申请日：2016-12-22
申请人： F5 Networks, Inc.
发明人： Paul Imre Szabo , Peter Michael Thornewell
IPC分类号： H04L12/26 , H04L29/06 , H04L12/823
摘要： Embodiments are directed to managing communication over a network with traffic management computers (TMCs). If network traffic that is statelessly monitored is selected for stateful monitoring, the TMCs may perform operations to transition from stateless monitoring to stateful monitoring with minimal disruption of users/clients. TMCs may receive the network traffic that include network packets. If the network packets are statelessly monitored by the TMCs one or more stateless network management operations may be performed on the network packets. If the network packets may be statefully monitored the TMCs may perform stateful network management operations on the network packets.

5. 发明授权

US09338095B2 Data flow segment optimized for hot flows 有权
标题翻译：针对热流优化数据流段
公开(公告)号：US09338095B2
公开(公告)日：2016-05-10
申请号：US13802254
申请日：2013-03-13
申请人： F5 NETWORKS, INC.
发明人： Paul Imre Szabo , Peter Michael Thornewell , Timothy Scott Michels
IPC分类号： H04L12/26 , H04L12/801 , H04L12/721 , H04L12/715 , H04L29/08
CPC分类号： H04L47/10 , H04L45/38 , H04L45/64 , H04L47/12 , H04L67/1002 , H04L69/169 , H04L69/22
摘要： Embodiments are directed towards improving the performance of network traffic management devices by optimizing the management of hot connection flows. A packet traffic management device (“PTMD”) may employ a data flow segment (“DFS”) and control segment (“CS”). The CS may perform high-level control functions and per-flow policy enforcement for connection flows maintained at the DFS, while the DFS may perform statistics gathering, per-packet policy enforcement (e.g., packet address translations), or the like, on connection flows maintained at the DFS. The DFS may include high-speed flow caches and other high-speed components that may be comprised of high-performance computer memory. Making efficient use of the high speed flow cache capacity may be improved by maximizing the number of hot connection flows and minimizing the number of malicious and/or in-operative connections flows (e.g., non-genuine flows) that may have flow control data stored in the high-speed flow cache.
摘要翻译：实施例旨在通过优化热连接流的管理来提高网络流量管理设备的性能。分组业务管理设备（“PTMD”）可以使用数据流分段（“DFS”）和控制段（“CS”）。 CS可以对在DFS上维护的连接流执行高级控制功能和每流策略执行，而DFS可以在连接时执行统计收集，每个分组策略执行（例如，分组地址转换）等流量维持在DFS。 DFS可以包括可能由高性能计算机存储器组成的高速流高速缓存和其他高速组件。可以通过最大化热连接流的数量并最小化可能存在流量控制数据的恶意和/或操作中连接流（例如非真实流）的数量来提高高速流缓存容量的有效利用在高速流缓存中。

6. 发明授权

US11019022B1 Processing packets with returnable values 有权
公开(公告)号：US11019022B1
公开(公告)日：2021-05-25
申请号：US16774520
申请日：2020-01-28
申请人： F5 Networks, Inc.
发明人： Peter Michael Thornewell , Robert Andrew Kovalchik
IPC分类号： H04L29/12 , H04L29/08 , H04L9/06
摘要： Technology related to processing network packets with returnable values is disclosed. In one example, a method includes intercepting a Domain Name System (DNS) request including returnable request values in respective request packet fields. A hash function can be used to characterize or modify the intercepted returnable request values. The intercepted DNS request can be forwarded to a DNS server. A DNS response including returnable response values in respective response packet fields can be received. The returnable response values and the hash function can be used to determine whether the DNS response is legitimate. A legitimate DNS response can be forwarded to a client.

7. 发明申请

US20170201444A1 INSERTING AND REMOVING STATEFUL DEVICES IN A NETWORK 审中-公开
公开(公告)号：US20170201444A1
公开(公告)日：2017-07-13
申请号：US15389309
申请日：2016-12-22
申请人： F5 Networks, Inc.
发明人： Paul Imre Szabo , Peter Michael Thornewell
IPC分类号： H04L12/26 , H04L12/823
CPC分类号： H04L43/0876 , H04L43/028 , H04L43/12 , H04L47/32 , H04L67/42
摘要： Embodiments are directed to managing communication over a network with traffic management computers (TMCs). If network traffic that is statelessly monitored is selected for stateful monitoring, the TMCs may perform operations to transition from stateless monitoring to stateful monitoring with minimal disruption of users/clients. TMCs may receive the network traffic that include network packets. If the network packets are statelessly monitored by the TMCs one or more stateless network management operations may be performed on the network packets. If the network packets may be statefully monitored the TMCs may perform stateful network management operations on the network packets.

8. 发明授权

US09210094B1 Utilization of TCP segmentation offload with jumbo and non-jumbo networks 有权
标题翻译：使用巨型和非巨型网络的TCP分段卸载
公开(公告)号：US09210094B1
公开(公告)日：2015-12-08
申请号：US13730535
申请日：2012-12-28
申请人： F5 NETWORKS, INC.
发明人： Jeffrey Michael Warren , Peter Michael Thornewell
IPC分类号： H04L12/805 , H04L12/24
CPC分类号： H04L47/36 , H04L41/028
摘要： A traffic management device (TMD) is situated between a one or more network devices providing jumbo network traffic and one or more device providing non-jumbo network traffic. The TMD is configured to employ TCP segmentation offload hardware within a Network Interface Card (NIC) at the level two/four layers of the OSI stack by rewriting maximum segment size (MSS) information during initial handshake operations, such that jumbo frames may be split into digestible size frames for a non-jumbo network communications.
摘要翻译：交通管理设备（TMD）位于提供巨型网络业务的一个或多个网络设备和提供非巨型网络业务的一个或多个设备之间。 TMD被配置为在初始握手操作期间通过重写最大段大小（MSS）信息来在OSI堆栈的二级/四层的网络接口卡（NIC）内采用TCP分段卸载硬件，使得巨型帧可能被拆分用于非巨型网络通信的可消化大小的帧。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式