专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2019112704A1 HIGH AVAILABILITY FOR STATEFUL SERVICES IN PUBLIC CLOUD LOGICAL NETWORKS 审中-公开
公开(公告)号：WO2019112704A1
公开(公告)日：2019-06-13
申请号：PCT/US2018/057186
申请日：2018-10-23
申请人： NICIRA, INC.
发明人： HIRA, Mukesh , CHANDRASHEKHAR, Ganesan , JAIN, Jayant , JAIN, Rahul
IPC分类号： H04L12/713 , H04L12/931 , H04L29/08 , H04L12/24 , H04L29/12 , H04L12/707 , H04L12/703 , H04L12/741 , H04L12/715 , H04L12/717
摘要： Some embodiments provide a method for a network controller that manages a logical network spanning multiple physical locations. For each physical location hosting data compute nodes (DCNs) belonging to the logical network, the method defines a centralized routing component for processing data messages between the DCNs hosted at the physical location and networks external to the logical network, assigns an active instance of the centralized routing component to operate at the physical location, and assigns a standby instance of the centralized routing component to operate at one of the other physical locations.

2. 发明申请

WO2018132699A1 MANAGING NETWORK TRAFFIC IN VIRTUAL SWITCHES BASED ON LOGICAL PORT IDENTIFIERS 审中-公开
公开(公告)号：WO2018132699A1
公开(公告)日：2018-07-19
申请号：PCT/US2018/013557
申请日：2018-01-12
申请人： NICIRA, INC.
发明人： JAIN, Jayant , CHANDRASHEKHAR, Ganesan , SENGUPTA, Anirban , THAKKAR, Pankaj , TESSMER, Alexander
IPC分类号： H04L12/721 , H04L12/715 , H04L12/931 , H04L12/46
摘要： Described herein are systems, methods, and software to enhance network traffic management. In one implementation, a first host identifies a packet to be transferred from a first virtual machine on the first host to a second virtual machine on a second host. In response to identifying the packet, the first host identifies a source logical port for the first virtual machine, and transferring a communication to the second host, wherein the communication encapsulates the data packet and the source logical port. Once the packet is received by the second host, the second host may use the source logical port to determine a forwarding action for the packet.

3. 发明申请

WO2016161394A1 PROVISIONING NETWORK SERVICES IN A SOFTWARE DEFINED DATA CENTER 审中-公开
标题翻译：在软件定义的数据中心提供网络服务
公开(公告)号：WO2016161394A1
公开(公告)日：2016-10-06
申请号：PCT/US2016/025763
申请日：2016-04-01
申请人： NICIRA, INC.
发明人： JAIN, Jayant , KOGANTY, Raju , SENGUPTA, Anirban
IPC分类号： G06F9/50 , H04L12/24
CPC分类号： H04L47/82 , G06F9/5072 , G06F9/5077 , H04L41/5048 , H04L41/5051 , H04L41/5077
摘要： [0001] Network services such as load balancer, firewall, IDS, IPS, encryption, decryption, are deployed today in the datacenter to provide a rich service oriented environment for applications and tenants. Typically these services are deployed at fixed points in the datacenter networking topology. Based upon configuration needs, the network services are provisioned to serve the various applications and tenants. As the demand increases and varies, the logistics of maintaining such static placement and provisioning methodology becomes challenging and leads to obfuscated and complex deployment involving hair-pinning traffic, choke point operation and complex configurations. The interdependencies across various apps and tenants often make the management of the network a mangled mess.
摘要翻译：诸如负载平衡器，防火墙，IDS，IPS，加密，解密之类的网络服务今天被部署在数据中心中，为应用和租户提供丰富的面向服务的环境。通常，这些服务部署在数据中心网络拓扑中的固定点。根据配置需求，提供网络服务，为各种应用和租户提供服务。随着需求的增加和变化，维护这种静态布局和配置方法的物流将变得具有挑战性，导致模糊和复杂的部署，包括头发定位流量，阻塞点操作和复杂配置。各种应用程序和租户的相互依赖往往使网络的管理变得混乱。

4. 发明申请

WO2014210572A1 NETWORK SERVICE SLOTTING 审中-公开
标题翻译：网络服务
公开(公告)号：WO2014210572A1
公开(公告)日：2014-12-31
申请号：PCT/US2014/044751
申请日：2014-06-27
申请人： NICIRA INC.
发明人： SENGUPTA, Anirban , JAIN, Jayant , MANUGURI, Subrahmanyam
IPC分类号： H04L29/08
CPC分类号： H04L45/74 , H04L67/327
摘要： Exemplary methods, apparatuses, and systems of packet processing utilize an ordered sequence of packet processing services to process a packet having a destination. The packet is a native, non-proprietary network packet that uses a standard network protocol and standard packet format. The packet processing services include a plurality of physical and/or virtual services. The ordered sequence is determined by applying one or more policy rules. A virtual service insertion platform manages routing of the packet to each service in the ordered sequence of services until all services have processed the packet, then the packet is forwarded to the packet destination.
摘要翻译：分组处理的示例性方法，装置和系统利用分组处理服务的有序序列来处理具有目的地的分组。该分组是使用标准网络协议和标准分组格式的本地非专有网络分组。分组处理服务包括多个物理和/或虚拟服务。有序序列通过应用一个或多个策略规则来确定。虚拟服务插入平台按照有序的服务顺序管理数据包到每个服务的路由，直到所有服务都处理了数据包，然后将数据包转发到数据包目的地。

5. 发明申请

WO2018106612A1 PERFORMING CONTEXT-RICH ATTRIBUTE-BASED SERVICES ON A HOST 审中-公开
公开(公告)号：WO2018106612A1
公开(公告)日：2018-06-14
申请号：PCT/US2017/064557
申请日：2017-12-04
申请人： NICIRA, INC.
发明人： POON, Arnold , GUNDA, Laxmikant , JAIN, Jayant , SENGUPTA, Anirban , VAIDYA, Sachin, Mohan
IPC分类号： G06F9/448 , H04L29/06
摘要： Some embodiments provide a novel method for configuring a set of service one or more nodes on a host to perform context-rich, attribute-based services on the host computer, which executes several data compute nodes (DCNs) in addition to the set of service nodes. The method uses a context-filtering node on the host to collect a first set of attributes associated with service rules processed by the set of service nodes on the host computer. The context filter also collects a second set of attributes associated with at least one data message flow of a DCN (e.g., of a virtual machine (VM) or container) executing on the host. After collecting the first and second sets of attributes, the context filtering node on the host compares the first and second sets of attributes to generate a service tag to represent a subset of the first set of attributes associated with the data message flow. The method associates this service tag with the data message flow. This service tag can then be used to identify the subset of attributes associated with the data message flow when a service node needs to process its attribute-based service rules for the data message flow.

6. 发明申请

WO2017040334A1 DISTRIBUTING REMOTE DEVICE MANAGEMENT ATTRIBUTES TO SERVICE NODES FOR SERVICE RULE PROCESSING 审中-公开
标题翻译：分配远程设备管理属性到服务规则处理服务
公开(公告)号：WO2017040334A1
公开(公告)日：2017-03-09
申请号：PCT/US2016/049109
申请日：2016-08-26
申请人： NICIRA, INC.
发明人： JAIN, Jayant , SENGUPTA, Anirban , NIMMAGADDA, Srinivas , TIAGI, Alok, S. , KUMAR, Kausum
IPC分类号： H04L12/24 , H04L29/08
CPC分类号： H04L63/20 , G06F17/30958 , H04L12/4641 , H04L41/5045 , H04L61/256 , H04L61/2571 , H04L61/2585 , H04L63/0236 , H04L63/0263 , H04L63/0272 , H04L63/029 , H04L63/08 , H04L63/105 , H04L67/1004 , H04L67/1097 , H04L69/22 , H04W12/08 , H04W76/12
摘要： Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.
摘要翻译：一些实施例提供用于基于来自远程设备管理（RDM）系统的数据消息属性在网络中处理远程设备数据消息的新颖方法。例如，一些实施例的方法识别与数据消息相关联的一组RDM属性，然后基于所识别的RDM属性集执行一个或多个服务操作。

7. 发明申请

WO2015187201A1 USE OF STATELESS MARKING TO SPEED UP STATEFUL FIREWALL RULE PROCESSING 审中-公开
标题翻译：使用无状态标记来加快防火墙规则处理
公开(公告)号：WO2015187201A1
公开(公告)日：2015-12-10
申请号：PCT/US2014/072899
申请日：2014-12-30
申请人： NICIRA, INC.
发明人： JAIN, Jayant , SENGUPTA, Anirban , PARTHASARATHY, Mohan , HONG, Xinhua
IPC分类号： H04L29/06
CPC分类号： H04L63/0227
摘要： A novel method for stateful packet classification that uses hardware resources (580) for performing stateless lookups and software resources (520) for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network (590), some embodiments perform stateless look up operations for the incoming packet in hardware (580) and forward the result of the stateless look up to the software (520). The software (520) in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.
摘要翻译：提供了一种使用硬件资源（580）执行无状态查找和软件资源（520）进行有状态连接流握手的有状态分组分类的新颖方法。为了对来自网络（590）的传入分组进行分类，一些实施例对硬件中的输入分组（580）执行无状态查找操作，并将无状态查询的结果转发到软件（520）。软件（520）依次使用无状态查询的结果来执行状态连接流握手并且确定有状态分组分类的结果。

8. 发明申请

WO2016054272A1 INLINE SERVICE SWITCH 审中-公开
标题翻译：在线服务开关
公开(公告)号：WO2016054272A1
公开(公告)日：2016-04-07
申请号：PCT/US2015/053332
申请日：2015-09-30
申请人： NICIRA, INC.
发明人： JAIN, Jayant , SENGUPTA, Anirban , PARTHASARATHY, Mohan , SEQUEIRA, Allwyn , MASKALIK, Serge , LUND, Rick , KOGANTY, Raju , HONG, Xinhua
IPC分类号： H04L29/06
CPC分类号： H04L67/14 , H04L41/0803 , H04L47/125 , H04L47/825 , H04L51/18 , H04L67/10 , H04L67/1002 , H04L67/16 , H04L67/327 , H04L69/16 , H04L69/22 , H04W76/12
摘要： Some embodiments provide novel inline switches that distribute data messages from source compute nodes (SCNs) to different groups of destination service compute nodes (DSCNs). In some embodiments, the inline switches are deployed in the source compute nodes datapaths (e.g., egress datapath). The inline switches in some embodiments are service switches that (1) receive data messages from the SCNs, (2) identify service nodes in a service-node cluster for processing the data messages based on service policies that the switches implement, and (3) use tunnels to send the received data messages to their identified service nodes. Alternatively, or conjunctively, the inline service switches of some embodiments (1) identify service-nodes cluster for processing the data messages based on service policies that the switches implement, and (2) use tunnels to send the received data messages to the identified service-node clusters. The service-node clusters can perform the same service or can perform different services in some embodiments. This tunnel-based approach for distributing data messages to service nodes/clusters is advantageous for seamlessly implementing in a datacenter a cloud-based XaaS model (where XaaS stands for X as a service, and X stands for anything), in which any number of services are provided by service providers in the cloud.
摘要翻译：一些实施例提供了将数据消息从源计算节点（SCN）分发到目的地服务计算节点（DSCN）的不同组的新颖的内联交换机。在一些实施例中，内联交换机部署在源计算节点数据路径（例如，出口数据通路）中。一些实施例中的内联交换机是（1）从SCN接收数据消息的服务交换机，（2）基于交换机实现的服务策略来识别服务节点集群中的服务节点来处理数据消息，以及（3）使用隧道将接收的数据消息发送到其标识的服务节点。或者或联合地，一些实施例（1）的内联服务交换机基于交换机实现的服务策略来识别用于处理数据消息的服务节点簇，以及（2）使用隧道将接收的数据消息发送到所识别的服务节点集群。在一些实施例中，服务节点群集可以执行相同的服务或者可以执行不同的服务。这种将数据消息分发到服务节点/集群的基于隧道的方法对于在数据中心中无缝实现基于云的XaaS模型（其中XaaS代表X作为服务，X代表任何东西）是有利的，其中任何数量的服务由云中的服务提供商提供。

9. 发明申请

WO2016053373A1 LOAD BALANCING 审中-公开
标题翻译：负载均衡
公开(公告)号：WO2016053373A1
公开(公告)日：2016-04-07
申请号：PCT/US2014/072897
申请日：2014-12-30
申请人： NICIRA, INC.
发明人： JAIN, Jayant , SENGUPTA, Anirban , PARTHASARATHY, Mohan , SEQUEIRA, Allwyn , MASKALIK, Serge , LUND, Rick
IPC分类号： G06F9/44 , G06F9/46
CPC分类号： H04L47/125 , H04L45/24 , H04L45/44 , H04L47/70 , H04L61/2069 , H04L61/2521 , H04L61/6022 , H04L67/1002 , H04L67/1017 , H04L67/1025 , H04L67/1029
摘要： Load-balancing data messages are sent by a source node to one or more different groups of destination compute nodes (DCNs). A load -balancer in the source compute node's egress datapath receives each data message sent from the source compute node and determines whether the data message is addressed to one of the DCN groups for which the load-balancer spreads the data traffic. When the received data message is not addressed to one of the load-balanced DCN groups, the load-balancer forwards the received data message to its addressed destination. When the received data message is addressed to one of the load-balancer's DCN groups, the load-balancer identifies a DCN in the addressed DCN group that should receive the data message, and directs the data message t the identified DCN by changing the destination address in the data message from the address of the identified DCN group to the address of the identified DCN.
摘要翻译：负载平衡数据消息由源节点发送到一个或多个不同的目标计算节点（DCN）组。源计算节点的出口数据路径中的负载均衡器接收从源计算节点发送的每个数据消息，并确定数据消息是否寻址到负载均衡器扩展数据流量的DCN组之一。当接收到的数据消息未寻址到负载平衡DCN组之一时，负载平衡器将接收的数据消息转发到其寻址的目的地。当接收到的数据消息被寻址到负载均衡器的DCN组之一时，负载平衡器识别应该接收数据消息的所寻址的DCN组中的DCN，并且通过改变目的地址来指示数据消息t所标识的DCN 在从所识别的DCN组的地址到所识别的DCN的地址的数据消息中。

10. 发明申请

WO2015187200A1 EFFICIENT PACKET CLASSIFICATION FOR DYNAMIC CONTAINERS 审中-公开
标题翻译：动态集装箱的高效包装分类
公开(公告)号：WO2015187200A1
公开(公告)日：2015-12-10
申请号：PCT/US2014/072876
申请日：2014-12-30
申请人： NICIRA, INC.
发明人： PARTHASARATHY, Mohan , JAIN, Jayant , HONG, Xinhua , SENGUPTA, Anirban
IPC分类号： H04L12/741
CPC分类号： H04L45/74 , H04L45/30
摘要： A novel algorithm for packet classification that is based on a novel search structure for packet classification rules is provided. Addresses from all the containers are merged and maintained in a single Trie. Each entry in the Trie has additional information that can be traced back to the container from where the address originated. This information is used to keep the Trie in sync with the containers when the container definition dynamically changes.
摘要翻译：提供了一种基于分组分类规则的新颖搜索结构的分组分类的新颖算法。所有容器的地址都合并并维护在一个Trie中。 Trie中的每个条目都有其他信息，可以追溯到从地址发起的容器。当容器定义动态更改时，此信息用于保持Trie与容器同步。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式