专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2012151392A1 SYSTEMS AND METHODS FOR SR-IOV PASS-THRU VIA AN INTERMEDIARY DEVICE 审中-公开
标题翻译：用于通过中间设备的SR-IOV PASS-THRU的系统和方法
公开(公告)号：WO2012151392A1
公开(公告)日：2012-11-08
申请号：PCT/US2012/036306
申请日：2012-05-03
申请人： CITRIX SYSTEMS, INC. , NIMMAGADDA, Chitti , MIRANI, Rajiv , GOYAL, Raghu , DAVE, Saurabh
发明人： NIMMAGADDA, Chitti , MIRANI, Rajiv , GOYAL, Raghu , DAVE, Saurabh
IPC分类号： G06F9/50 , G06F9/455
CPC分类号： G06F9/45533 , G06F9/455 , G06F9/45537 , G06F9/4555 , G06F9/45558 , G06F9/5077 , G06F13/00 , G06F13/10 , G06F13/102 , G06F13/105 , G06F2009/45579 , G06F2009/45583 , H04L12/6418 , H04L41/0806 , H04L67/10
摘要： This disclosure describes a system for Single Root I/O Virtualization (SR-IOV) pass- thru for network packet processing via a virtualized environment of a device. The system includes a device comprising a virtualized environment and a plurality of virtual machines having a virtual network interface for receiving and transmitting network packets. A driver for the physical network interface of the device creates a plurality of virtual devices corresponding to the physical network interface, which appear as a Peripheral Component Interconnect (PCI) device to the virtualized environment. A virtual device of the plurality of virtual devices is assigned via the virtualized environment to each virtual machine of the plurality of virtual machines. The virtual machine uses the virtual device assigned to the virtual machine, to receive and transmit network packets via the physical network interface of the device.
摘要翻译：本公开描述了用于通过设备的虚拟化环境进行网络分组处理的单根I / O虚拟化（SR-IOV）系统。该系统包括包括虚拟化环境的设备和具有用于接收和发送网络分组的虚拟网络接口的多个虚拟机。用于设备的物理网络接口的驱动器创建对应于物理网络接口的多个虚拟设备，该物理网络接口作为外围组件互连（PCI）设备呈现给虚拟化环境。多个虚拟设备中的虚拟设备经由虚拟化环境分配给多个虚拟机的每个虚拟机。虚拟机使用分配给虚拟机的虚拟设备，通过设备的物理网络接口接收和发送网络数据包。

2. 发明申请

WO2010129516A1 SYSTEMS AND METHODS FOR PROVIDING A MULTI-CORE ARCHITECTURE FOR AN INTERNET PROTOCOL ACCELERATION APPLIANCE 审中-公开
标题翻译：为互联网协议加速器具提供多核心架构的系统和方法
公开(公告)号：WO2010129516A1
公开(公告)日：2010-11-11
申请号：PCT/US2010/033496
申请日：2010-05-04
申请人： CITRIX SYSTEMS, INC. , MIRANI, Rajiv , SINHA, Rajiv , CHAUHAN, Abhishek , SHETTY, Anil
发明人： MIRANI, Rajiv , SINHA, Rajiv , CHAUHAN, Abhishek , SHETTY, Anil
IPC分类号： H04L12/56 , H04L29/08 , H04L29/12 , G06F9/50
CPC分类号： H04L47/125 , G06F9/5005 , G06F2209/5016 , H04L29/12066 , H04L49/90 , H04L61/1511 , H04L67/02 , H04L67/14
摘要： The present solution is related to a method for distributing flows of network traffic across a plurality of packet processing engines executing on a corresponding core of a multi-core device. The method includes receiving, by a multi-core device intermediary to clients and servers, a packet of a first flow of network traffic between a client and server. The method also includes assigning, by a flow distributor of the multi-core device, the first flow of network traffic to a first core executing a packet processing engine and distributing the packet to this core. The flow distributor may distribute packets of another or second flow of traffic between another client and server to a second core executing a second packet processing engine. When a packet for the flow of traffic assigned to the first core is received, such as a third packet, the flow distributor distributes this packet to the first core.
摘要翻译：本解决方案涉及在多核设备的相应核上执行的多个分组处理引擎上分配网络流量流的方法。所述方法包括：通过多核设备中介向客户端和服务器接收在客户端和服务器之间的第一流网络流量的分组。该方法还包括将多核设备的流分配器将第一流网络流量分配给执行分组处理引擎的第一核心，并将该分组分发到该核心。流分配器可将另一客户端和服务器之间的另一或第二流量流的分组分发到执行第二分组处理引擎的第二核心。当接收到分配给第一核的流量流的分组（例如第三分组）时，流分发器将该分组分发到第一核心。

3. 发明申请

WO2010127266A1 SYSTEMS AND METHODS FOR PROVIDING A VIRTUAL APPLIANCE IN AN APPLICATION DELIVERY FABRIC 审中-公开
标题翻译：用于在应用交付织物中提供虚拟装置的系统和方法
公开(公告)号：WO2010127266A1
公开(公告)日：2010-11-04
申请号：PCT/US2010/033198
申请日：2010-04-30
申请人： CITRIX SYSTEMS, INC. , GOODWIN, Thomas , MIRANI, Rajiv , CHAUHAN, Abishek , SUCHOMEL, Frank , GOEL, Deepak
发明人： GOODWIN, Thomas , MIRANI, Rajiv , CHAUHAN, Abishek , SUCHOMEL, Frank , GOEL, Deepak
IPC分类号： G06F9/455
CPC分类号： G06F9/455 , G06F8/60
摘要： The present disclosure is directed to systems and method for providing a virtual appliance. One or more application delivery controller appliances intermediary to a plurality of clients and a plurality of servers perform a plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers. A virtual application delivery controller is deployed on a device intermediary to the plurality of clients and the plurality of servers. The virtual application delivery controller executing on the device performs one or more of the plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers.
摘要翻译：本公开涉及用于提供虚拟设备的系统和方法。在多个客户端和多个服务器之间中介的一个或多个应用交付控制器设备对在多个客户端和多个服务器之间传送的网络流量执行多个应用传递控制功能。虚拟应用传送控制器被部署在多个客户机和多个服务器的中间设备上。在该设备上执行的虚拟应用传送控制器对多个客户端与多个服务器之间传送的网络流量执行多个应用传递控制功能中的一个或多个。

4. 发明申请

WO2009094654A1 SYSTEMS AND METHODS FOR CONFIGURATION AND FINE GRAIN POLICY DRIVEN WEB CONTENT DETECTION AND REWRITE 审中-公开
标题翻译：用于配置和精细粒度驱动网络内容检测和清晰度的系统和方法
公开(公告)号：WO2009094654A1
公开(公告)日：2009-07-30
申请号：PCT/US2009/032042
申请日：2009-01-26
申请人： CITRIX SYSTEMS, INC. , AGARWAL, Puneet , THIRUNARAYANAN, Srinivasan , ADHYA, Saibal, Kumar , CHOUDHARY, Akshat , KORRAPATTI, Vamsi , KHEMANI, Prakash , MIRANI, Rajiv , REDDY, Anoop
发明人： AGARWAL, Puneet , THIRUNARAYANAN, Srinivasan , ADHYA, Saibal, Kumar , CHOUDHARY, Akshat , KORRAPATTI, Vamsi , KHEMANI, Prakash , MIRANI, Rajiv , REDDY, Anoop
IPC分类号： H04L29/06
CPC分类号： H04L63/0272 , H04L29/08846 , H04L63/0281 , H04L63/105 , H04L63/166 , H04L63/20 , H04L67/02 , H04L67/14 , H04L67/2814
摘要： The present disclosure provides solutions that may enable an enterprise providing services to a number of clients to determine whether to establish a client based SSL VPN session or a clientless SSL VPN session with a client based on an information associated with the client. An intermediary establishing SSL VPN sessions between clients and servers may receive a request from a client to access a server. The intermediary may identify a session policy based on the request. The session policy may indicate whether to establish a client based SSL VPN session or clientless SSL VPN session with the server. The intermediary may determine, responsive to the policy, to establish a clientless or client based SSL VPN session between the client and the server.
摘要翻译：本公开提供了可以使得能够向多个客户端提供服务的企业基于与客户端相关联的信息来确定是否建立与客户端的基于客户端的SSL VPN会话或客户端SSL VPN会话的解决方案。在客户端和服务器之间建立SSL VPN会话的中间件可以接收客户端访问服务器的请求。中介可以根据请求识别会话策略。会话策略可以指示是否与服务器建立基于客户端的SSL VPN会话或客户端SSL VPN会话。中介可以根据策略确定在客户端和服务器之间建立基于客户端或客户端的SSL VPN会话。

5. 发明申请

WO2008112769A3 SYSTEMS AND METHODS FOR CONFIGURING, APPLYING AND MANAGING OBJECT-ORIENTED POLICY EXPRESSIONS FOR A NETWORK DEVICE 审中-公开
公开(公告)号：WO2008112769A3
公开(公告)日：2008-09-18
申请号：PCT/US2008/056671
申请日：2008-03-12
申请人： CITRIX SYSTEMS, INC. , KHEMANI, Prakash , BANDEKAR, Vishal , KORRAPATI, Vamsimohan , MIRANI, Rajiv , CHAUHAN, Abhishek , SIKKA, Namit , REDDY, Anoop
发明人： KHEMANI, Prakash , BANDEKAR, Vishal , KORRAPATI, Vamsimohan , MIRANI, Rajiv , CHAUHAN, Abhishek , SIKKA, Namit , REDDY, Anoop
IPC分类号： H04L12/24 , H04L29/06
摘要： Systems and methods for configuring and evaluating policies that direct processing of one or more data streams are described. A configuration interface is described for allowing users to specify object oriented policies. These object oriented policies may allow any data structures to be applied with respect to a payload of a received packet stream, including any portions of HTTP traffic. A configuration interface may also allow the user to control the order in which policies and policy groups are executed, in addition to specifying actions to be taken if one or more policies are undefined. Systems and methods for processing the policies may allow efficient processing of object-oriented policies by applying potentially complex data structures to unstructured data streams. A device may also interpret and process a number of flow control commands and policy group invocation statements to determine an order of execution among a number of policies and policy groups. These policy configurations and processing may allow configuration and processing of complex network behaviors relating to load balancing, VPNs, SSL offloading, content switching, application security, acceleration, and caching.

6. 发明申请

WO2007139552A1 SYSTEMS AND METHODS FOR DETERMINING THE CHARSET ENCODING FOR DECODING A REQUEST SUBMISSION IN A GATEWAY 审中-公开
标题翻译：用于确定在网关中提出请求的CHARSET编码的系统和方法
公开(公告)号：WO2007139552A1
公开(公告)日：2007-12-06
申请号：PCT/US2006/021067
申请日：2006-05-31
申请人： CITRIX SYSTEMS, INC. , MIRANI, Rajiv , WONG, Stanley, Hang , CHAUHAN, Abhishek
发明人： MIRANI, Rajiv , WONG, Stanley, Hang , CHAUHAN, Abhishek
IPC分类号： H04L29/08
CPC分类号： H04L63/02 , H04L63/0263 , H04L63/0281 , H04L63/029
摘要： The systems and methods are disclosed for determining the charset encoding of a request submission intercepts by a gateway (105) to decode the request according to the charset. A gateway (105) receives a request from a client (101a,... / 10In) comprising encoded content, such as a url encoded request. The gateway (105) determines the application (110A,..., 110N) generating or associated with the request. Based on the determined application, the gateway identifies the character encoding scheme associated with or to be used for the application. The gateway (105) then decodes the portion of the request using the identified character encoding scheme and applies any rules or policies to the request. In some embodiments, the gateway operates as an application firewall or security control system that applies polices to encoded application network traffic to which it can decode according to the encoding scheme associated with each application.
摘要翻译：公开了系统和方法，用于确定由网关（105）截取的请求提交的字符集编码，以根据字符集解码请求。网关（105）从包括诸如url编码请求的编码内容的客户机（101a，... / 10In）接收请求。网关（105）确定生成或与请求相关联的应用（110A，...，110N）。基于确定的应用，网关标识与应用相关联或将要用于应用的字符编码方案。网关（105）然后使用所识别的字符编码方案对请求的部分进行解码，并对该请求应用任何规则或策略。在一些实施例中，网关作为应用防火墙或安全控制系统运行，该应用防火墙或安全控制系统根据与每个应用相关联的编码方案将策略应用于可解码的编码应用网络流量。

7. 发明申请

WO2008112769A2 SYSTEMS AND METHODS FOR CONFIGURING, APPLYING AND MANAGING SECURITY POLICIES 审中-公开
标题翻译：用于配置，应用和管理安全策略的系统和方法
公开(公告)号：WO2008112769A2
公开(公告)日：2008-09-18
申请号：PCT/US2008056671
申请日：2008-03-12
申请人： CITRIX SYSTEMS INC , KHEMANI PRAKASH , BANDEKAR VISHAL , KORRAPATI VAMSIMOHAN , MIRANI RAJIV , CHAUHAN ABHISHEK , SIKKA NAMIT , REDDY ANOOP
发明人： KHEMANI PRAKASH , BANDEKAR VISHAL , KORRAPATI VAMSIMOHAN , MIRANI RAJIV , CHAUHAN ABHISHEK , SIKKA NAMIT , REDDY ANOOP
CPC分类号： H04L41/0893 , H04L41/0233 , H04L41/046 , H04L43/0852 , H04L43/12 , H04L63/0457 , H04L63/102
摘要： Systems and methods for configuring and evaluating policies that direct processing of one or more data streams are described. A configuration interface is described for allowing users to specify object oriented policies. These object oriented policies may allow any data structures to be applied with respect to a payload of a received packet stream, including any portions of HTTP traffic. A configuration interface may also allow the user to control the order in which policies and policy groups are executed, in addition to specifying actions to be taken if one or more policies are undefined. Systems and methods for processing the policies may allow efficient processing of object-oriented policies by applying potentially complex data structures to unstructured data streams. A device may also interpret and process a number of flow control commands and policy group invocation statements to determine an order of execution among a number of policies and policy groups. These policy configurations and processing may allow configuration and processing of complex network behaviors relating to load balancing, VPNs, SSL offloading, content switching, application security, acceleration, and caching.
摘要翻译：描述用于配置和评估直接处理一个或多个数据流的策略的系统和方法。描述了用于允许用户指定面向对象策略的配置界面。这些面向对象的策略可以允许任何数据结构相对于接收到的分组流的有效载荷应用，包括HTTP流量的任何部分。配置界面还可以允许用户控制执行策略和策略组的顺序，以及如果未定义一个或多个策略，则指定要采取的操作。用于处理策略的系统和方法可以允许通过将潜在的复杂数据结构应用于非结构化数据流来有效地处理面向对象的策略。设备还可以解释和处理多个流控制命令和策略组调用语句以确定多个策略和策略组中的执行顺序。这些策略配置和处理可能允许配置和处理与负载均衡，VPN，SSL卸载，内容切换，应用安全，加速和缓存相关的复杂网络行为。

8. 发明申请

WO2010151496A1 SYSTEMS AND METHODS FOR PLATFORM RATE LIMITING 审中-公开
标题翻译：用于平台速率限制的系统和方法
公开(公告)号：WO2010151496A1
公开(公告)日：2010-12-29
申请号：PCT/US2010/039213
申请日：2010-06-18
申请人： CITRIX SYSTEMS, INC. , AVDANIN, Roman , BOTS, Henk , TALLA, Ramanjaneyulu, Y. , CHAUHAN, Abhishek , MIRANI, Rajiv
发明人： AVDANIN, Roman , BOTS, Henk , TALLA, Ramanjaneyulu, Y. , CHAUHAN, Abhishek , MIRANI, Rajiv
IPC分类号： H04L12/56
CPC分类号： H04L47/10 , H04L43/0894 , H04L47/20 , H04L47/215 , H04L47/2425 , H04L47/32 , H04L63/0272 , H04L63/102
摘要： The present disclosure presents systems and methods for controlling network traffic traversing an intermediary device based on a license or a permit granted for the intermediary device. The systems and methods control a rate of a traffic of a device in accordance with a rate limit identified by a rate limiting license. A rate limiting manager of an intermediary device that processes network traffic between a plurality of clients and a plurality of servers, may identify presence of a rate limiting license that further identifies a performance level. The rate limiting manager may establish a rate limit based on the performance level of the rate limiting license. A throttler of the intermediary may control a rate of receiving network packets in accordance with the rate limit.
摘要翻译：本公开提供了用于基于许可证或为中间设备授予的许可来控制遍历中间设备的网络流量的系统和方法。系统和方法根据由速率限制许可证标识的速率限制来控制设备的业务速率。处理多个客户端和多个服务器之间的网络流量的中间设备的速率限制管理器可以标识进一步识别性能级别的速率限制许可证的存在。速率限制管理器可以基于速率限制许可证的性能级别建立速率限制。中介人的节流器可以根据速率限制来控制接收网络分组的速率。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式