专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07512071B2 Distributed flow enforcement 有权
标题翻译：分布式流量执行
公开(公告)号：US07512071B2
公开(公告)日：2009-03-31
申请号：US10876733
申请日：2004-06-25
申请人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer , Benjamin H. Stoltz
发明人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer , Benjamin H. Stoltz
IPC分类号： H04L12/26
CPC分类号： H04L47/2441 , H04L47/10 , H04L47/20 , H04L47/2458
摘要： A flow manager may receive packet flow rules from one or more network services and may generate a unified rule set according to the received packet flow rules. A flow manager may additionally split the unified rule set into subsets for enforcement by one or more flow enforcement devices and may install the rule subsets onto the flow enforcement devices. When splitting the unified rule set into subsets, a flow manager may analyze a network topology connecting the flow enforcement devices. A flow manager may also receive additional packet flow rules, integrate them into the unified rule set, update the rule subsets according to the additional rules, and install the updated subsets onto the flow enforcement devices.
摘要翻译：流管理器可以从一个或多个网络服务接收分组流规则，并且可以根据接收的分组流规则生成统一的规则集。流程管理器可以另外将统一规则集划分为子集以供一个或多个流量执行设备执行，并且可以将规则子集安装到流量执行设备上。当将统一规则集分成子集时，流管理器可以分析连接流执行设备的网络拓扑。流管理器还可以接收额外的分组流规则，将它们集成到统一规则集中，根据附加规则更新规则子集，并将更新的子集安装到流量执行设备上。

2. 发明授权

US07441022B1 Resolving conflicts between network service rule sets for network data traffic in a system where rule patterns with longer prefixes match before rule patterns with shorter prefixes 有权
标题翻译：解决在具有较短前缀的规则模式之前具有较长前缀的规则模式匹配的系统中网络数据流量的网络服务规则集之间的冲突
公开(公告)号：US07441022B1
公开(公告)日：2008-10-21
申请号：US10800091
申请日：2004-03-12
申请人： Christoph L. Schuba , Jason L. Goldschmidt , Michael F. Speer
发明人： Christoph L. Schuba , Jason L. Goldschmidt , Michael F. Speer
IPC分类号： G06F15/173
CPC分类号： H04L41/5025 , H04L45/308 , H04L47/125 , H04L47/32 , H04L63/062 , H04L67/1002 , H04L67/1008 , H04L67/1034 , H04L67/322
摘要： One embodiment of the present invention provides a system that resolves conflicts between network service rules for network data traffic in a system where rule patterns with longer prefixes match before rule patterns with shorter prefixes. The system operates by receiving a set of network service rules for network data traffic from multiple network services, wherein network service rules from different network services can possibly conflict. Each of these network service rules specifies: a filter that defines a prefix for a set of packets in the packet flow, and an action list that specifies one or more actions to be applied to the set of packets. Next, the system identifies a conflict between a higher priority rule and a lower priority rule in the set of network service rules. The system resolves this conflict by prepending an action list of the higher priority rule to an action list of a rule with a filter that defines a longer prefix.
摘要翻译：本发明的一个实施例提供一种解决系统中的网络服务规则之间的冲突的系统，其中具有较长前缀的规则模式在具有较短前缀的规则模式之前匹配的系统中。系统通过接收来自多个网络服务的网络数据流量的一组网络服务规则来操作，其中来自不同网络服务的网络服务规则可能会发生冲突。这些网络服务规则中的每一个规定：为分组流中的一组分组定义前缀的过滤器，以及指定要应用于该组分组的一个或多个动作的动作列表。接下来，系统识别网络服务规则集中较高优先级规则和较低优先权规则之间的冲突。系统通过将具有较高优先级规则的操作列表添加到具有定义较长前缀的过滤器的规则的操作列表来解决此冲突。

3. 发明授权

US07760730B2 Rule set verification 有权
标题翻译：规则集验证
公开(公告)号：US07760730B2
公开(公告)日：2010-07-20
申请号：US10868556
申请日：2004-06-15
申请人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer
发明人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer
IPC分类号： H04L12/28
CPC分类号： H04L41/0869 , H04L41/0823 , H04L41/0879 , H04L41/5009 , H04L41/5022 , H04L41/5093
摘要： A flow manager may receive prioritized packet flow rules from one or more network services where each rule may include a packet filter and prioritized actions. Each action of a packet flow rule may be either terminating or non-terminating. A flow manager may generate a unified rule set according to the received packet flow rules and may additionally validate the unified rule set to identity errors. When validating the unified rule set, a flow manager may compare the unified rule set against one or more defined policies. Alternatively, a flow manager may apply the unified rule set to either captured or manually specified simulated network packets. A flow manager may also identity extraneous rules or actions. Further, a flow manager may present the unified rule set for manual verification and may receive input identifying errors and specifying modification to correct the errors.
摘要翻译：流管理器可以从一个或多个网络服务接收优先级分组流规则，其中每个规则可以包括分组过滤器和优先化动作。分组流规则的每个动作可以是终止或非终止。流管理器可以根据接收到的分组流规则生成统一的规则集，并且可以另外验证统一规则集以识别错误。当验证统一规则集时，流管理器可以将统一规则集与一个或多个定义的策略进行比较。或者，流管理器可以将统一规则集应用于捕获的或手动指定的模拟网络分组。流程管理器还可以标识无关规则或动作。此外，流管理器可以呈现用于手动验证的统一规则集，并且可以接收输入识别错误并指定修改以校正错误。

4. 发明授权

US07711780B1 Method for distributed end-to-end dynamic horizontal scalability 有权
标题翻译：分布式端到端动态水平可扩展性的方法
公开(公告)号：US07711780B1
公开(公告)日：2010-05-04
申请号：US10895228
申请日：2004-07-20
申请人： Alain D. Durand , Jason L. Goldschmidt , Michael F. Speer
发明人： Alain D. Durand , Jason L. Goldschmidt , Michael F. Speer
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L67/16 , H04L45/306 , H04L67/1002
摘要： A datacenter system including a plurality of nodes configured to send and receive a service request, a service table on the plurality of nodes configured to store route information extracted from a signaling mechanism, and a forwarding engine configured to route the service request to at least one of the plurality of nodes using route information from the service table.
摘要翻译：一种数据中心系统，包括被配置为发送和接收服务请求的多个节点，被配置为存储从信令机制提取的路由信息的多个节点上的服务表，以及被配置为将服务请求路由到至少一个的多个节点使用来自服务表的路由信息。

5. 发明授权

US08369325B2 Method and apparatus for packet classification and spreading in a virtualized system 有权
标题翻译：在虚拟化系统中进行数据包分类和扩展的方法和装置
公开(公告)号：US08369325B2
公开(公告)日：2013-02-05
申请号：US12494498
申请日：2009-06-30
申请人： Arvind Srinivasan , Michael F. Speer , Marcelino M. Dignum
发明人： Arvind Srinivasan , Michael F. Speer , Marcelino M. Dignum
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L47/10 , G06F9/45533 , H04L47/125 , H04L47/2441
摘要： Some embodiments of the present invention provide a system for packet classification and spreading in a virtualized system. The system can use information in a packet's header to determine a destination system-image in the virtualized system, and a packet-spreading policy for the destination system-image. The system can determine a key using the information in a packet's header. Alternatively, the system can hash the information in the packet's header to obtain an index value. Next, the system can use the key or the index value to perform a lookup in a table which associates keys or index values with system images and/or packet-spreading policies. Once the destination system-image and the packet-spreading policy are determined, the system can deliver the packet to a thread on the destination system-image according to the packet-spreading policy.
摘要翻译：本发明的一些实施例提供了一种用于虚拟化系统中的分组分类和扩展的系统。系统可以使用分组报头中的信息来确定虚拟化系统中的目标系统映像，以及目的系统映像的分组传播策略。该系统可以使用分组报头中的信息来确定密钥。或者，系统可以对分组报头中的信息进行散列以获得索引值。接下来，系统可以使用密钥或索引值在将密钥或索引值与系统映像和/或分组传播策略相关联的表中执行查找。一旦确定了目的地系统图像和分组扩展策略，系统可以根据分组传播策略将分组递送到目的地系统图像上的线程。

6. 发明申请

US20100329253A1 METHOD AND APPARATUS FOR PACKET CLASSIFICATION AND SPREADING IN A VIRTUALIZED SYSTEM 有权
标题翻译：用于虚拟化系统中的分组分类和扩展的方法和装置
公开(公告)号：US20100329253A1
公开(公告)日：2010-12-30
申请号：US12494498
申请日：2009-06-30
申请人： Arvind Srinivasan , Michael F. Speer , Marcelino M. Dignum
发明人： Arvind Srinivasan , Michael F. Speer , Marcelino M. Dignum
IPC分类号： H04L12/56
CPC分类号： H04L47/10 , G06F9/45533 , H04L47/125 , H04L47/2441
摘要： Some embodiments of the present invention provide a system for packet classification and spreading in a virtualized system. The system can use information in a packet's header to determine a destination system-image in the virtualized system, and a packet-spreading policy for the destination system-image. The system can determine a key using the information in a packet's header. Alternatively, the system can hash the information in the packet's header to obtain an index value. Next, the system can use the key or the index value to perform a lookup in a table which associates keys or index values with system images and/or packet-spreading policies. Once the destination system-image and the packet-spreading policy are determined, the system can deliver the packet to a thread on the destination system-image according to the packet-spreading policy.
摘要翻译：本发明的一些实施例提供了一种用于虚拟化系统中的分组分类和扩展的系统。系统可以使用分组报头中的信息来确定虚拟化系统中的目标系统映像，以及目的系统映像的分组传播策略。该系统可以使用分组报头中的信息来确定密钥。或者，系统可以对分组报头中的信息进行散列以获得索引值。接下来，系统可以使用密钥或索引值在将密钥或索引值与系统映像和/或分组传播策略相关联的表中执行查找。一旦确定了目的地系统图像和分组扩展策略，系统可以根据分组传播策略将分组递送到目的地系统图像上的线程。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式