ATTESTATION SERVICE GATEWAY
    1.
    发明申请

    公开(公告)号:WO2021126590A1

    公开(公告)日:2021-06-24

    申请号:PCT/US2020/063722

    申请日:2020-12-08

    Abstract: Systems, methods, and computer-readable media for assessing reliability and trustworthiness of devices across domains. Attestation information for an attester node in a first domain is received at a verifier gateway in the first domain. The attestation information is translated at the verifier gateway into translated attestation information for a second domain. Specifically, the attestation information is translated into translated attested information for a second domain that is a different administrative domain from the first domain. The translated attestation information can be provided to a verifier in the second domain. The verifier can be configured to verify the trustworthiness of the attester node for a relying node in the second domain by identifying a level of trust of the attester node based on the translated attestation information.

    LONGEST PREFIX MATCHING
    2.
    发明申请

    公开(公告)号:WO2019199615A1

    公开(公告)日:2019-10-17

    申请号:PCT/US2019/026153

    申请日:2019-04-05

    Abstract: One embodiment performs longest prefix matching operations in one or more different manners that provides packet processing and/or memory efficiencies in the processing of packets. In one embodiment, a packet switching device determines a set of one or more mask lengths of a particular conforming entry of a multibit trie or other data structure that matches a particular address of a packet via a lookup operation in a mask length data structure. A conforming entry refers to an entry which has less than or equal to a maximum number of different prefix lengths, with this maximum number corresponding to the maximum number of prefix lengths which can be searched in parallel in the address space for a longest matching prefix by the implementing hardware. The packet switching device then performs corresponding hash table lookup operation(s) in parallel in determining an overall longest matching prefix for the particular address.

    FORWARDING OF PACKETS BASED ON A FILTERED FORWARDING INFORMATION BASE
    4.
    发明申请
    FORWARDING OF PACKETS BASED ON A FILTERED FORWARDING INFORMATION BASE 审中-公开
    基于过滤的前向信息库转发分组

    公开(公告)号:WO2011041442A1

    公开(公告)日:2011-04-07

    申请号:PCT/US2010/050760

    申请日:2010-09-29

    CPC classification number: H04L45/00 H04L45/02 H04L45/54

    Abstract: A filtered Forwarding Information Base (FIB) (the "complete local FIB") is used to determine how to forward packets, typically on line cards. The complete local FIB is generated by filtering (i.e., dropping or removing) extraneous entries in the standard global FIB of a router. This smaller FIB is then installed within the memory of a forwarding engine, possibly implemented as a single application-specific integrated circuit (ASIC), for use in determining how to forward packets, with the router forwarding packets accordingly.

    Abstract translation: 过滤的转发信息库(FIB)(“完整本地FIB”)用于确定如何转发数据包,通常在线路卡上。 完整的本地FIB通过过滤(即,丢弃或删除)路由器的标准全局FIB中的无关条目来生成。 然后将较小的FIB安装在转发引擎的存储器内,可能实现为单个专用集成电路(ASIC),用于确定如何转发数据包,路由器会相应地转发数据包。

    SYSTEM AND METHOD OF VERIFYING NETWORK COMMUNICATION PATHS BETWEEN APPLICATIONS AND SERVICES

    公开(公告)号:WO2020086276A1

    公开(公告)日:2020-04-30

    申请号:PCT/US2019/055433

    申请日:2019-10-09

    Abstract: Disclosed are concepts for provided for managing application traffic. A method includes receiving a request to access a service from an application, confirming an entity of a user of the application and, based on the confirmation, generating, via an authentication service, a routing policy for data flows between the application and the service. The routing policy defines a mandated path between the application and the service. The method also can include storing proof-of-transit data in the traffic flow for tracking an actual path from the application to the service and determining whether the data path complies with the mandated path defined in the policy. When the determination indicates that the actual path followed the mandated path defined in the routing policy, the method includes granting access to the user for the service. When the actual path differs from the mandated path, the method includes denying access to the user.

    ENHANCED SEGMENT ROUTING PROCESSING OF PACKETS

    公开(公告)号:WO2019005956A1

    公开(公告)日:2019-01-03

    申请号:PCT/US2018/039739

    申请日:2018-06-27

    Abstract: In one embodiment, new Segment Routing capabilities are used in the steering of packets through Segment Routing nodes in a network. A Segment List includes a set of one or more Segment List (SL) Groups, each of which identifies one or more Segments contiguously or non-contiguously stored in the Segment List (or stored across multiple Segment Lists) of a Segment Routing packet. Each SL Group typically includes one Segment that is encoded as a Segment Identifier, and may include Segments that are Extended Values. The steering order of SL Groups is not required to be the same order as they are listed in the Segment List, as the value of Segments Left may be increased, remain the same, or decreased (possibly to skip a next SL Group) and possibly based on the result of an evaluation of a conditional expression.

    DHCP INITIALIZATION RESPONSIVE TO NETWORK LAYER CONNECTIVITY

    公开(公告)号:WO2009102919A3

    公开(公告)日:2009-08-20

    申请号:PCT/US2009/034006

    申请日:2009-02-13

    Abstract: Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with loss of network layer connectivity triggering Dynamic Host Configuration Protocol (DHCP) initialization. According to one embodiment, a network device connected to a network initializes one or more network communication values of the network device using DHCP. The network device monitors Network Layer (Layer 3) connectivity with a remote network device; and in response to detecting a loss of said monitored Network Layer connectivity, DHCP initialization of the network device is performed.

    CLASS-AWARE LOAD BALANCING USING DATA-PLANE PROTOCOL IN A LOOP-FREE MULTIPLE EDGE NETWORK TOPOLOGY
    9.
    发明公开
    CLASS-AWARE LOAD BALANCING USING DATA-PLANE PROTOCOL IN A LOOP-FREE MULTIPLE EDGE NETWORK TOPOLOGY 审中-公开
    数据 - 平面协议在无环多核边缘网络拓扑结构中的类别感知负载均衡

    公开(公告)号:EP3157210A3

    公开(公告)日:2017-05-24

    申请号:EP16175949.3

    申请日:2016-06-23

    CPC classification number: H04L47/11 H04L47/125

    Abstract: In one embodiment, a method comprises detecting a traffic condition by a network device in a loop-free routing topology comprising routing arcs for reaching a destination device, each routing arc comprising a first edge, a second edge, and at least a third network device configured for routing any network traffic along the routing arc toward the destination device and exiting via any one of the first or second edges of the routing arc, the traffic condition proximate to the first edge of at least one of the routing arcs in which the network device is positioned; and the network device initiating load balancing based on sending a management frame over a data plane of the at least one routing arc toward the corresponding second edge, the management frame requesting a change in load balancing for at least one of an identified traffic class based on the detected traffic condition.

    Abstract translation: 在一个实施例中,一种方法包括通过包括用于到达目的地设备的路由弧的无环路由拓扑中的网络设备检测交通情况,每个路由弧包括第一边缘,第二边缘和至少第三网络设备 ,其被配置用于沿着所述路由弧向所述目的地设备路由任何网络流量并且经由所述路由弧的所述第一或第二边缘中的任一个退出所述交通状况,所述交通状况接近所述网络中的至少一个路由弧的所述第一边缘 设备定位; 以及所述网络设备基于在所述至少一个路由弧的数据平面上向对应的第二边发送管理帧来发起负载平衡,所述管理帧基于以下内容请求对所识别的流量类中的至少一个的负载平衡的改变: 检测到的交通状况。

Patent Agency Ranking