专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09015438B2 System and method for achieving enhanced performance with multiple networking central processing unit (CPU) cores 有权
标题翻译：通过多个网络中央处理单元（CPU）核心实现增强性能的系统和方法
公开(公告)号：US09015438B2
公开(公告)日：2015-04-21
申请号：US13692622
申请日：2012-12-03
申请人： Ramsundar Janakiraman , Prasad Palkar , Brijesh Nambiar , Sridhar Kamsetty , Vijayaraghavan Doraiswami
发明人： Ramsundar Janakiraman , Prasad Palkar , Brijesh Nambiar , Sridhar Kamsetty , Vijayaraghavan Doraiswami
IPC分类号： G06F12/00 , G06F9/52 , H04L12/54
CPC分类号： G06F9/526 , H04L12/56
摘要： The present disclosure discloses a method and network device for achieving enhanced performance with multiple CPU cores in a network device having a symmetric multiprocessing architecture. The disclosed method allows for storing, by each central processing unit (CPU) core, a non-atomic data structure, which is specific to each networking CPU core, in a memory shared by the plurality of CPU cores. Also, the memory is not associated with any locking mechanism. In response to a data packet is received by a particular CPU core, the disclosed system will update a value of the non-atomic data structure corresponding to the particular CPU core. The data structure may be a counter or a fragment table. Further, a dedicated CPU core is allocated to process only data packets received from other CPU cores, and is responsible for dynamically responding to queries receives from a control plane process.
摘要翻译：本公开公开了一种用于在具有对称多处理架构的网络设备中实现具有多个CPU内核的增强性能的方法和网络设备。所公开的方法允许由每个中央处理单元（CPU）存储由多个CPU核共享的存储器中的每个联网CPU核心特有的非原子数据结构。此外，内存不与任何锁定机制相关联。响应于特定CPU核心接收到的数据分组，所公开的系统将更新对应于特定CPU核心的非原子数据结构的值。数据结构可以是计数器或片段表。此外，分配专用CPU核以仅处理从其他CPU核心接收的数据分组，并且负责动态响应从控制平面进程接收到的查询。

2. 发明申请

US20140156954A1 SYSTEM AND METHOD FOR ACHIEVING ENHANCED PERFORMANCE WITH MULTIPLE NETWORKING CENTRAL PROCESSING UNIT (CPU) CORES 有权
标题翻译：用多个网络中央处理单元（CPU）实现增强性能的系统和方法
公开(公告)号：US20140156954A1
公开(公告)日：2014-06-05
申请号：US13692622
申请日：2012-12-03
申请人： Ramsundar Janakiraman , Prasad Palkar , Brijesh Nambiar , Sridhar Kamsetty , Vijayaraghavan Doraiswami
发明人： Ramsundar Janakiraman , Prasad Palkar , Brijesh Nambiar , Sridhar Kamsetty , Vijayaraghavan Doraiswami
IPC分类号： G06F12/14
CPC分类号： G06F9/526 , H04L12/56
摘要： The present disclosure discloses a method and network device for achieving enhanced performance with multiple CPU cores in a network device having a symmetric multiprocessing architecture. The disclosed method allows for storing, by each central processing unit (CPU) core, a non-atomic data structure, which is specific to each networking CPU core, in a memory shared by the plurality of CPU cores. Also, the memory is not associated with any locking mechanism. In response to a data packet is received by a particular CPU core, the disclosed system will update a value of the non-atomic data structure corresponding to the particular CPU core. The data structure may be a counter or a fragment table. Further, a dedicated CPU core is allocated to process only data packets received from other CPU cores, and is responsible for dynamically responding to queries receives from a control plane process.
摘要翻译：本公开公开了一种用于在具有对称多处理架构的网络设备中实现具有多个CPU内核的增强性能的方法和网络设备。所公开的方法允许由每个中央处理单元（CPU）存储由多个CPU核共享的存储器中的每个联网CPU核心特有的非原子数据结构。此外，内存不与任何锁定机制相关联。响应于特定CPU核心接收到的数据分组，所公开的系统将更新对应于特定CPU核心的非原子数据结构的值。数据结构可以是计数器或片段表。此外，分配专用CPU核以仅处理从其他CPU核心接收的数据分组，并且负责动态响应从控制平面进程接收到的查询。

3. 发明授权

US08887237B2 Multimode authentication 有权
标题翻译：多模式认证
公开(公告)号：US08887237B2
公开(公告)日：2014-11-11
申请号：US13107743
申请日：2011-05-13
申请人： Ramsundar Janakiraman , Rajesh Mirukula , Brijesh Nambiar
发明人： Ramsundar Janakiraman , Rajesh Mirukula , Brijesh Nambiar
IPC分类号： H04L29/06 , H04L29/12 , H04L12/46
CPC分类号： H04L61/2015 , H04L12/4641 , H04L63/08
摘要： Assigning clients to VLANs on a digital network. A client attaching to a digital network through a network device is initially assigned to a first VLAN. This VLAN may have restricted access and is used for authentication. The device snoops DHCP traffic on this first VLAN rewriting DHCP traffic from the client to request a short lease time for the client. A short lease time may be on the order of 30 seconds. The device optionally rewrites DHCP traffic to the client on the first VLAN to assure a short lease time is returned; this rewriting supports DHCP servers which do not issue short leases. Traffic on this first VLAN may be limited to authentication such as captive portals, 802.1x, Kerberos, and the like. If client authentication on the first VLAN does not succeed, when the short lease expires, the client will receive another short lease on the first VLAN. The network device snoops authentication traffic. When authentication succeeds, the device snoops this traffic and derives information such as roles and the target VLAN for the client, saving this information. When the short DHCP lease expires for the client, and the client restarts the DHCP process, the device assigns the client to the target VLAN and all further processing occurs on this target VLAN.
摘要翻译：将客户端分配给数字网络上的VLAN。首先将通过网络设备连接到数字网络的客户端分配给第一个VLAN。该VLAN可能具有受限访问权限，用于认证。该设备在此第一个VLAN上侦听DHCP流量，重写客户端的DHCP流量，为客户端请求一个短租约时间。短租约时间可能在30秒左右。该设备可选地在第一个VLAN上重写DHCP流量到客户端，以确保返回较短的租期; 此重写支持不发布短租赁的DHCP服务器。此第一个VLAN上的流量可能会限制为诸如强制门户，802.1x，Kerberos等认证。如果第一个VLAN的客户端认证不成功，则在短租期届满时，客户端将在第一个VLAN上收到另一个短租约。网络设备窥探认证流量。当认证成功时，设备会窥探此流量，并为客户端导出角色和目标VLAN等信息，保存此信息。当客户端的短DHCP租期过期，客户端重新启动DHCP进程时，设备将客户端分配给目标VLAN，并在此目标VLAN上进行所有进一步的处理。

4. 发明申请

US20120291098A1 Multimode Authentication 有权
标题翻译：多模式认证
公开(公告)号：US20120291098A1
公开(公告)日：2012-11-15
申请号：US13107743
申请日：2011-05-13
申请人： Ramsundar Janakiraman , Rajesh Mirukula , Brijesh Nambiar
发明人： Ramsundar Janakiraman , Rajesh Mirukula , Brijesh Nambiar
IPC分类号： G06F21/00
CPC分类号： H04L61/2015 , H04L12/4641 , H04L63/08
摘要： Assigning clients to VLANs on a digital network. A client attaching to a digital network through a network device is initially assigned to a first VLAN. This VLAN may have restricted access and is used for authentication. The device snoops DHCP traffic on this first VLAN rewriting DHCP traffic from the client to request a short lease time for the client. A short lease time may be on the order of 30 seconds. The device optionally rewrites DHCP traffic to the client on the first VLAN to assure a short lease time is returned; this rewriting supports DHCP servers which do not issue short leases. Traffic on this first VLAN may be limited to authentication such as captive portals, 802.1x, Kerberos, and the like. If client authentication on the first VLAN does not succeed, when the short lease expires, the client will receive another short lease on the first VLAN. The network device snoops authentication traffic. When authentication succeeds, the device snoops this traffic and derives information such as roles and the target VLAN for the client, saving this information. When the short DHCP lease expires for the client, and the client restarts the DHCP process, the device assigns the client to the target VLAN and all further processing occurs on this target VLAN.
摘要翻译：将客户端分配给数字网络上的VLAN。首先将通过网络设备连接到数字网络的客户端分配给第一个VLAN。该VLAN可能具有受限访问权限，用于认证。该设备在此第一个VLAN上侦听DHCP流量，重写客户端的DHCP流量，为客户端请求一个短租约时间。短租约时间可能在30秒左右。该设备可选地在第一个VLAN上重写DHCP流量到客户端，以确保返回较短的租期; 此重写支持不发布短租赁的DHCP服务器。此第一个VLAN上的流量可能会限制为诸如强制门户，802.1x，Kerberos等认证。如果第一个VLAN的客户端认证不成功，则在短租期届满时，客户端将在第一个VLAN上收到另一个短租约。网络设备窥探认证流量。当认证成功时，设备会窥探此流量，并为客户端导出角色和目标VLAN等信息，保存此信息。当客户端的短DHCP租期过期，客户端重新启动DHCP进程时，设备将客户端分配给目标VLAN，并在此目标VLAN上进行所有进一步的处理。

5. 发明申请

US20130286922A1 VIDEO MULTICAST OPTIMIZATION 有权
标题翻译：视频多播优化
公开(公告)号：US20130286922A1
公开(公告)日：2013-10-31
申请号：US13460821
申请日：2012-04-30
申请人： Brijesh Nambiar
发明人： Brijesh Nambiar
IPC分类号： H04W4/06
CPC分类号： H04W4/06 , Y02D70/142 , Y02D70/168
摘要： A network device includes a communication interface and a processor. The communication interface may receive a multicast stream that includes a frame. The processor is coupled to the communication interface and may determine whether to send the frame unicast or multicast. The communication interface transmits the frame unicast or multicast based on the determination by the processor. The determination by the processor may be based on characteristics of the frame. If the characteristics of the frame include characteristics of a key frame such as an I-frame, the processor may determine to transmit the frame unicast. The determination may also be based on a predetermined state of client devices that are to receive the frame. If a client device is in a predetermined state such as a power save state, the processor may determine to transmit the frame unicast to that client device. Other embodiments are also described.
摘要翻译：网络设备包括通信接口和处理器。通信接口可以接收包括帧的多播流。处理器耦合到通信接口，并且可以确定是发送帧单播还是组播。通信接口基于处理器的确定发送帧单播或多播。处理器的确定可以基于帧的特性。如果帧的特征包括诸如I帧的关键帧的特征，则处理器可以确定发送帧单播。该确定还可以基于要接收帧的客户端设备的预定状态。如果客户端设备处于诸如省电状态的预定状态，则处理器可以确定将帧单播发送到该客户端设备。还描述了其它实施例。

6. 发明申请

US20080155252A1 VLAN tunneling 有权
标题翻译： VLAN隧道
公开(公告)号：US20080155252A1
公开(公告)日：2008-06-26
申请号：US11644098
申请日：2006-12-22
申请人： Brijesh Nambiar
发明人： Brijesh Nambiar
IPC分类号： H04L9/06 , H04L12/66
CPC分类号： H04L12/4641 , H04L9/0833 , H04L9/0838 , H04L12/4633 , H04L63/0272 , H04L2209/80 , H04W12/00 , H04W12/02
摘要： According to one embodiment of the invention, a method for establishing multiple tunnels for each virtual local area network is described. Upon receiving information over a first tunnel associated with a first virtual local area network, a determination is made whether the information is from a network device assigned to a second virtual local area network, which differs from the first virtual local area network. If the network device is a member of the second virtual local area network, a second tunnel associated with the second virtual local area network is created.
摘要翻译：根据本发明的一个实施例，描述了一种用于为每个虚拟局域网建立多个隧道的方法。在通过与第一虚拟局域网相关联的第一隧道接收到信息时，确定信息是否来自分配给与第一虚拟局域网不同的第二虚拟局域网的网络设备。如果网络设备是第二虚拟局域网的成员，则创建与第二虚拟局域网相关联的第二隧道。

7. 发明申请

US20080092223A1 Per-user firewall 有权
标题翻译：每用户防火墙
公开(公告)号：US20080092223A1
公开(公告)日：2008-04-17
申请号：US11582096
申请日：2006-10-16
申请人： Deepinder Setia , John Taylor , Keerti Melkote , Brijesh Nambiar
发明人： Deepinder Setia , John Taylor , Keerti Melkote , Brijesh Nambiar
IPC分类号： G06F15/16 , G06F17/00 , G06F9/00
CPC分类号： H04L63/0227 , H04L63/08 , H04L63/101
摘要： A network device to provide per-user firewall capabilities. The network device identifies a user associated with a received frame and a role of the user. The network device determines the firewall actions to be taken for the frame based on the role of the associated user. The user role may be dynamically changed by an administrator or automatically. A user role may be altered based on the authentication level of the user. The network device provides a system where a customized authentication experience may be provided for each user and services and permissions may be managed on a per-user basis.
摘要翻译：提供每用户防火墙功能的网络设备。网络设备识别与接收的帧相关联的用户和用户的角色。网络设备基于相关用户的角色确定要为该帧采取的防火墙操作。用户角色可能由管理员或自动动态更改。可以基于用户的认证级别来改变用户角色。网络设备提供可以为每个用户提供定制认证体验的系统，并且可以在每个用户的基础上管理服务和许可。

8. 发明授权

US09231911B2 Per-user firewall 有权
标题翻译：每用户防火墙
公开(公告)号：US09231911B2
公开(公告)日：2016-01-05
申请号：US11582096
申请日：2006-10-16
申请人： Deepinder Setia , John Taylor , Keerti Melkote , Brijesh Nambiar
发明人： Deepinder Setia , John Taylor , Keerti Melkote , Brijesh Nambiar
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L63/08 , H04L63/101
摘要： A network device to provide per-user firewall capabilities. The network device identifies a user associated with a received frame and a role of the user. The network device determines the firewall actions to be taken for the frame based on the role of the associated user. The user role may be dynamically changed by an administrator or automatically. A user role may be altered based on the authentication level of the user. The network device provides a system where a customized authentication experience may be provided for each user and services and permissions may be managed on a per-user basis.
摘要翻译：提供每用户防火墙功能的网络设备。网络设备识别与接收的帧相关联的用户和用户的角色。网络设备基于相关用户的角色确定要为该帧采取的防火墙操作。用户角色可能由管理员或自动动态更改。可以基于用户的认证级别来改变用户角色。网络设备提供可以为每个用户提供定制认证体验的系统，并且可以在每个用户的基础上管理服务和许可。

9. 发明申请

US20120166804A1 VLAN Tunneling 审中-公开
标题翻译： VLAN隧道
公开(公告)号：US20120166804A1
公开(公告)日：2012-06-28
申请号：US13417054
申请日：2012-03-09
申请人： Brijesh Nambiar
发明人： Brijesh Nambiar
IPC分类号： H04L12/56 , H04L9/32
CPC分类号： H04L12/4641 , H04L9/0833 , H04L9/0838 , H04L12/4633 , H04L63/0272 , H04L2209/80 , H04W12/00 , H04W12/02
摘要： According to one embodiment of the invention, a method is described that is directed to sending, by a network device, information over a first tunnel associated with a first virtual local area network. Also, a second tunnel associated with the second virtual local area network is created by the network device if the information is determined to be received from a network device that is a member of the second virtual local area network differing from the first virtual local area network. Herein, the first tunnel and the second tunnel each encapsulates at least data link traffic.
摘要翻译：根据本发明的一个实施例，描述了一种旨在由网络设备通过与第一虚拟局域网相关联的第一隧道发送信息的方法。此外，如果确定从作为与第一虚拟局域网不同的第二虚拟局域网的成员的网络设备接收到的信息，则由网络设备创建与第二虚拟局域网相关联的第二隧道。这里，第一隧道和第二隧道每个封装至少数据链路业务。

10. 发明授权

US08161543B2 VLAN tunneling 有权
标题翻译： VLAN隧道
公开(公告)号：US08161543B2
公开(公告)日：2012-04-17
申请号：US11644098
申请日：2006-12-22
申请人： Brijesh Nambiar
发明人： Brijesh Nambiar
IPC分类号： H04L29/06
CPC分类号： H04L12/4641 , H04L9/0833 , H04L9/0838 , H04L12/4633 , H04L63/0272 , H04L2209/80 , H04W12/00 , H04W12/02
摘要： According to one embodiment of the invention, a method for establishing multiple tunnels for each virtual local area network is described. Upon receiving information over a first tunnel associated with a first virtual local area network, a determination is made whether the information is from a network device assigned to a second virtual local area network, which differs from the first virtual local area network. If the network device is a member of the second virtual local area network, a second tunnel associated with the second virtual local area network is created.
摘要翻译：根据本发明的一个实施例，描述了一种用于为每个虚拟局域网建立多个隧道的方法。在通过与第一虚拟局域网相关联的第一隧道接收到信息时，确定信息是否来自分配给与第一虚拟局域网不同的第二虚拟局域网的网络设备。如果网络设备是第二虚拟局域网的成员，则创建与第二虚拟局域网相关联的第二隧道。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式