公开(公告)号：WO2015175007A1

公开(公告)日：2015-11-19

申请号：PCT/US2014/045312

申请日：2014-07-02

Applicant: DELL SOFTWARE INC.

Inventor： LING, Hui ,  CHEN, Zhong

IPC: H04L1/00

CPC classification number: H04L63/0254 ,  H04L43/028 ,  H04L45/38 ,  H04L45/42 ,  H04L61/2007 ,  H04L63/0245 ,  H04L63/1408 ,  H04L63/1441 ,  H04L67/10 ,  H04L69/22

Abstract: The present invention relates to a method and system for performing deep packet inspection of messages transmitted through a network switch in a Software Defined Network (SDN). Embodiments of the invention include a network switch, a controller, and a firewall in a software defined networking environment. In the present invention, the network switch is a simple network switch that is physically separate from the controller and the firewall. The invention may include a plurality of physically distinct network switches communicating with one or more controllers and firewalls. In certain instances, communications between the network switch, the controller, and the firewall are performed using the Open Flow standard communication protocol.

Abstract translation: 本发明涉及一种用于对通过软件定义网络（SDN）中的网络交换机传送的消息进行深度分组检查的方法和系统。 本发明的实施例包括在软件定义的联网环境中的网络交换机，控制器和防火墙。 在本发明中，网络交换机是与控制器和防火墙物理分离的简单网络交换机。 本发明可以包括与一个或多个控制器和防火墙通信的多个物理上不同的网络交换机。 在某些情况下，使用Open Flow标准通信协议执行网络交换机，控制器和防火墙之间的通信。

公开(公告)号：EP3143714A1

公开(公告)日：2017-03-22

申请号：EP14891998.8

申请日：2014-07-02

Applicant: Dell Software Inc.

Inventor： LING, Hui ,  CHEN, Zhong

IPC: H04L1/00

CPC classification number: H04L63/0254 ,  H04L43/028 ,  H04L45/38 ,  H04L45/42 ,  H04L61/2007 ,  H04L63/0245 ,  H04L63/1408 ,  H04L63/1441 ,  H04L67/10 ,  H04L69/22

Abstract: The present invention relates to a method and system for performing deep packet inspection of messages transmitted through a network switch in a Software Defined Network (SDN). Embodiments of the invention include a network switch, a controller, and a firewall in a software defined networking environment. In the present invention, the network switch is a simple network switch that is physically separate from the controller and the firewall. The invention may include a plurality of physically distinct network switches communicating with one or more controllers and firewalls. In certain instances, communications between the network switch, the controller, and the firewall are performed using the Open Flow standard communication protocol.

Abstract translation: 本发明涉及一种用于对通过软件定义网络（SDN）中的网络交换机传送的消息进行深度分组检查的方法和系统。 本发明的实施例包括在软件定义的联网环境中的网络交换机，控制器和防火墙。 在本发明中，网络交换机是与控制器和防火墙物理分离的简单网络交换机。 本发明可以包括与一个或多个控制器和防火墙通信的多个物理上不同的网络交换机。 在某些情况下，使用Open Flow标准通信协议执行网络交换机，控制器和防火墙之间的通信。