System and Method to Process a Chain of Network Applications

    公开(公告)号:US20170201418A1

    公开(公告)日:2017-07-13

    申请号:US14995136

    申请日:2016-01-13

    CPC classification number: H04L41/5051 G06F9/46

    Abstract: Facilitation of processing a chain of network applications by a network controller is provided herein. In some examples, a network controller comprising a fast path module receives a service request data packet from a client side session between a client and the network controller and determines that the service request data packet matches a network application chain order, the network application chain order indicating a configuration to apply a plurality of network applications. The fast path module processes the service request data packet according to the configuration indicated in the network application chain order.

    Forwarding Policies on a Virtual Service Network

    公开(公告)号:US20170111441A1

    公开(公告)日:2017-04-20

    申请号:US15394669

    申请日:2016-12-29

    Abstract: In providing packet forwarding policies in a virtual service network that includes a network node and a pool of service load balancers serving a virtual service, the network node: receives a virtual service session request from a client device, the request including a virtual service network address for the virtual service; compares the virtual service network address in the request with the virtual service network address in each at least one packet forwarding policy; in response to finding a match between the virtual service network address in the request and a given virtual service network address in a given packet forwarding policy, determines the given destination in the given packet forwarding policy; and sends the request to a service load balancer in the pool of service load balancers associated with the given destination, where the service load balancer establishes a virtual service session with the client device.

    Allocating buffer for TCP proxy session based on dynamic network conditions

    公开(公告)号:US09602442B2

    公开(公告)日:2017-03-21

    申请号:US14863083

    申请日:2015-09-23

    Inventor: Liang Han

    CPC classification number: H04L49/9005 H04L49/90 H04L67/28 H04L67/42 H04L69/16

    Abstract: Allocation of buffers for a TCP proxy session between a client and a server by a service gateway includes monitoring dynamic network behaviors for server and client side sessions of the TCP proxy session; and allocating capacity for a server side buffer and capacity for a client side buffer in a memory buffer based on the dynamic server side network behaviors, the dynamic client side network behaviors, and a weighted average of a capacity of the memory buffer. In one approach to the allocation, the gateway determines whether an available capacity of the server or client side buffer is sufficient to store a data packet. If not sufficient, the allocated capacity of the server or client side buffer is increased based on measurements of the dynamic network behaviors and the weighted average, and the available capacity of the server or client side buffer is adjusted accordingly.

    Applying Security Policy to an Application Session
    104.
    发明申请
    Applying Security Policy to an Application Session 有权
    将应用安全策略应用于应用程序会话

    公开(公告)号:US20170041350A1

    公开(公告)日:2017-02-09

    申请号:US15334174

    申请日:2016-10-25

    Abstract: Applying a security policy to an application session, includes recognizing the application session between a network and an application via a security gateway, determining by the security gateway a user identity of the application session using information about the application session, obtaining by the security gateway the security policy comprising network parameters mapped to the user identity, and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

    Abstract translation: 将安全策略应用到应用会话中,包括通过安全网关识别网络和应用之间的应用会话,使用关于应用会话的信息由安全网关确定应用会话的用户身份,由安全网关获取 包括映射到用户身份的网络参数的安全策略,以及安全网关将安全策略应用于应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略,其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

    Virtual application delivery chassis system
    106.
    发明授权
    Virtual application delivery chassis system 有权
    虚拟应用交付机箱系统

    公开(公告)号:US09477563B2

    公开(公告)日:2016-10-25

    申请号:US14492360

    申请日:2014-09-22

    Abstract: A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

    Abstract translation: 一种用于在虚拟应用分发机架(VADC)中选择主刀片的方法,包括:由每个刀片发送VADC消息给每个其他刀片; 在预定时间段内由每个刀片确定VADC消息未被从主刀片接收; 作为响应,将包括由每个刀片的刀片优先级的主要声明消息发送到其他刀片; 由每个刀片确定从所接收的主机声明消息获得的任何刀片优先级是否高于接收刀片的刀片优先级; 响应于确定没有获得的叶片优先级更高,将给定接收叶片的状态设置为新的主叶片; 并且由给定接收刀片发送第二VADC消息给另一个刀片,指示给定接收刀片的新主刀片的状态。

    PROGRAMMING A DATA NETWORK DEVICE USING USER DEFINED SCRIPTS WITH LICENSES
    109.
    发明申请
    PROGRAMMING A DATA NETWORK DEVICE USING USER DEFINED SCRIPTS WITH LICENSES 有权
    使用用户定义的脚本与许可编程数据网络设备

    公开(公告)号:US20160057252A1

    公开(公告)日:2016-02-25

    申请号:US14492465

    申请日:2014-09-22

    Abstract: Exemplary embodiments for programming a network device using user-defined scripts are disclosed. The systems and methods provide for a servicing node to receive a request for a network session between a client device and a server, receive a user defined class and a user defined object configuration from a node controller, and use the information to instruct an object virtual machine to generate at least one user defined object. The servicing node can then apply the at least one user defined object to a data packet of the network session, where the user defined object allows a user to configure the network device with user-defined instruction scripts.

    Abstract translation: 公开了使用用户定义的脚本编程网络设备的示例性实施例。 所述系统和方法为服务节点提供接收对客户端设备和服务器之间的网络会话的请求,从节点控制器接收用户定义的类和用户定义的对象配置,并且使用该信息来指示对象虚拟 机器生成至少一个用户定义的对象。 服务节点然后可以将至少一个用户定义的对象应用于网络会话的数据分组,其中用户定义的对象允许用户使用用户定义的指令脚本来配置网络设备。

    APPLYING SECURITY POLICY TO AN APPLICATION SESSION
    110.
    发明申请
    APPLYING SECURITY POLICY TO AN APPLICATION SESSION 有权
    将安全政策适用于申请会议

    公开(公告)号:US20160050233A1

    公开(公告)日:2016-02-18

    申请号:US14323884

    申请日:2014-07-03

    Abstract: Applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

    Abstract translation: 将安全策略应用于应用程序会话包括:通过安全网关识别网络和应用程序之间的应用程序会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略,其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

Patent Agency Ranking