公开(公告)号：US08775599B2

公开(公告)日：2014-07-08

申请号：US13527372

申请日：2012-06-19

申请人： Deepak Bansal ,  Parveen Patel ,  Albert Greenberg

发明人： Deepak Bansal ,  Parveen Patel ,  Albert Greenberg

IPC分类号： G06F15/173

CPC分类号： H04L47/10 ,  G06F9/5072 ,  G06F9/5077

摘要： A system that includes multiple hosts, each running a plurality of virtual machines. The system may be, for example, a cloud computing environment in which there are services and a service coordination system that communicates with the hosts and with the services. The services include a middleware management service that is configured to maintain per-tenant middleware policy for each of multiple tenants. The middleware management service causes the middleware policy to be applied to network traffic by directing network traffic to a middleware enforcement mechanism. This middleware policy is per-tenant in that it depends on an identity of a tenant.

摘要翻译： 包括多个主机的系统，每个主机运行多个虚拟机。 该系统可以是例如云计算环境，其中存在与主机和服务进行通信的服务和服务协调系统。 这些服务包括一个中间件管理服务，该服务被配置为为多个租户中的每一个维护租户的中间件策略。 中间件管理服务通过将网络流量引导到中间件执行机制，使中间件策略应用于网络流量。 这种中间件政策是租用的，因为它取决于租户的身份。

公开(公告)号：US20130346558A1

公开(公告)日：2013-12-26

申请号：US13530054

申请日：2012-06-21

申请人： Yousef A. Khalidi ,  Deepak Bansal ,  Changhoon Kim ,  Srikanth Kandula ,  David A. Maltz ,  Parveen Patel

发明人： Yousef A. Khalidi ,  Deepak Bansal ,  Changhoon Kim ,  Srikanth Kandula ,  David A. Maltz ,  Parveen Patel

IPC分类号： G06F15/16

CPC分类号： G06F9/5072 ,  G06F2209/509

摘要： A delivery controller for use in an enterprise environment that communicates with a cloud computing environment that is providing a service for the enterprise. As the cloud service processing progresses, some cloud service data is transferred from the cloud computing environment to the enterprise environment, and vice versa. The cloud service data may be exchanged over any one of a number of different types of communication channels. The delivery controller selects which communication channel to use to transfer specific data, depending on enterprise policy. Such policy might consider any business goals of the enterprise, and may be applied at the application level.

摘要翻译： 用于与为企业提供服务的云计算环境通信的企业环境中的传送控制器。 随着云服务处理的进行，一些云服务数据从云计算环境转移到企业环境，反之亦然。 云服务数据可以通过多种不同类型的通信信道中的任一种进行交换。 交付控制器根据企业策略选择使用哪个通信信道来传送特定数据。 这样的政策可以考虑企业的任何业务目标，并可以在应用程序级别应用。

公开(公告)号：US20100082804A1

公开(公告)日：2010-04-01

申请号：US12243848

申请日：2008-10-01

申请人： Parveen Patel ,  Albert Gordon Greenberg ,  David Maltz

发明人： Parveen Patel ,  Albert Gordon Greenberg ,  David Maltz

IPC分类号： G06F15/16 ,  G06F11/34

CPC分类号： G06F11/3433 ,  G06F11/3419 ,  G06F11/3495

摘要： Routing network traffic on a computer network is described. In one embodiment, a method is presented which includes transmitting instructions to a client, the instructions executable by the client to request content from two or more content servers, measure two or more network performance characteristics associated with the two or more different content servers, and issue a report to an administrative server. The report may include a first network performance characteristic and a second network performance characteristic. The method may further include selecting a target content server from one of two or more content servers based on comparison of the two or more network performance characteristics; and transmitting routing instructions to an intermediate routing system, the routing instructions executable by the intermediate routing system to direct subsequent content requests transmitted by the client to the target content server.

摘要翻译： 描述计算机网络上的路由网络流量。 在一个实施例中，提供了一种方法，其包括向客户端发送指令，可由客户端执行以从两个或多个内容服务器请求内容的指令测量与两个或多个不同内容服务器相关联的两个或多个网络性能特征，以及 向管理服务器发出报告。 该报告可以包括第一网络性能特征和第二网络性能特征。 该方法还可以包括基于两个或多个网络性能特征的比较从两个或多个内容服务器之一中选择目标内容服务器; 以及向中间路由系统发送路由指令，所述路由指令由中间路由系统执行，以将客户端发送的后续内容请求引导到目标内容服务器。

公开(公告)号：US20120155266A1

公开(公告)日：2012-06-21

申请号：US12972340

申请日：2010-12-17

申请人： Parveen Patel ,  Volodymyr Ivanov ,  Marios Zikos ,  Vladimir Petter ,  Vyacheslav Kuznetsov ,  David Allen Dion

发明人： Parveen Patel ,  Volodymyr Ivanov ,  Marios Zikos ,  Vladimir Petter ,  Vyacheslav Kuznetsov ,  David Allen Dion

IPC分类号： H04L12/26

CPC分类号： H04L47/125 ,  H04L43/0876 ,  H04L45/22 ,  H04L47/11

摘要： The present invention extends to methods, systems, and computer program products for synchronizing state among load balancer components. Embodiments of the invention include load balancers using a consistent hashing algorithm to decide how new connections should be load balanced. Use of consistent hashing algorithm permits load balancers to work in a stateless manner in steady state. Load balancers start keeping flow state information (destination address for a given flow) about incoming packets when it is needed, i.e. such as, for example, when a change in destination host configuration is detected. State information is shared across load balancers in a deterministic way, which allows knowing which load balancer is authoritative (e.g., is the owner) for a given flow. Each load balancer can reach the authoritative load balancer to learn about a flow that cannot be determined locally.

摘要翻译： 本发明扩展到用于在负载均衡器组件之间同步状态的方法，系统和计算机程序产品。 本发明的实施例包括使用一致的散列算法来确定新连接应如何负载平衡的负载平衡器。 使用一致的散列算法可以使负载平衡器以稳定的状态工作。 负载平衡器在需要时开始保持关于输入分组的流状态信息（给定流的目的地址），例如当检测到目的主机配置的改变时。 状态信息以确定性的方式在负载平衡器之间共享，这允许了解哪个负载均衡器对于给定流量是权威的（例如，是所有者）。 每个负载均衡器可以到达权威负载平衡器，以了解当地无法确定的流量。

公开(公告)号：US08416692B2

公开(公告)日：2013-04-09

申请号：US12605388

申请日：2009-10-26

申请人： Parveen Patel ,  Lihua Yuan ,  David Maltz ,  Albert Greenberg ,  Randy Kern

发明人： Parveen Patel ,  Lihua Yuan ,  David Maltz ,  Albert Greenberg ,  Randy Kern

IPC分类号： H04L1/00 ,  H04L12/28 ,  H04J3/24

CPC分类号： H04L61/103 ,  H04L12/4633 ,  H04L29/12028 ,  H04L45/04 ,  H04L45/24 ,  H04L67/1027

摘要： The present application relates to network configurations and specifically to scalable load balancing network configurations. One implementation includes an external client coupled to a scalable load balancing system. The scalable load balancing system includes a load balancing layer that is configured to encapsulate individual incoming packets of a packet flow from the external client. The load balancing layer is further configured to route the incoming packets to target devices on the system. The target devices can span multiple IP subnets. The incoming packets can pass through one or more load balancers of the load balancing layer before reaching individual target devices. Individual target devices can be configured to route at least some outgoing packets of the packet flow to the external client without passing through any of the one or more load balancers.

摘要翻译： 本申请涉及网络配置，具体涉及可伸缩负载平衡网络配置。 一个实现包括耦合到可伸缩负载平衡系统的外部客户端。 可扩展负载平衡系统包括负载平衡层，其被配置为封装来自外部客户端的分组流的各个输入分组。 负载平衡层还被配置为将传入的分组路由到系统上的目标设备。 目标设备可以跨越多个IP子网。 传入的数据包可以在到达各个目标设备之前通过负载平衡层的一个或多个负载平衡器。 可以将各个目标设备配置为将分组流的至少一些输出分组路由到外部客户端，而不通过任何一个或多个负载平衡器。

公开(公告)号：US20120303809A1

公开(公告)日：2012-11-29

申请号：US13115444

申请日：2011-05-25

申请人： Parveen Patel ,  Deepak Bansal ,  Changhoon Kim ,  Marios Zikos ,  Volodymyr Ivanov

发明人： Parveen Patel ,  Deepak Bansal ,  Changhoon Kim ,  Marios Zikos ,  Volodymyr Ivanov

IPC分类号： G06F15/16

CPC分类号： H04L67/1025 ,  H04L45/00 ,  H04L47/125 ,  H04L61/2532 ,  H04L61/2546 ,  H04L67/1029 ,  H04L67/288 ,  H04L69/16 ,  H04L69/22

摘要： The present invention extends to methods, systems, and computer program products for off loading load balancing packet modification. Embodiments of the invention can be used to offload the load of forwarding packets back to packet senders. Load balancers and/or the NAT devices can handle the first few packets of a connection to formulate connection mappings and then are removed from further communication for the connections. For example, a load balancer or NAT device makes the corresponding load balancing or the NAT decision based on a first packet and then informs the sender of the data of the decision. From then on, the sender can directly send the data to the receiver without having to go through the load balancer or NAT.

摘要翻译： 本发明扩展到用于卸载负载平衡分组修改的方法，系统和计算机程序产品。 本发明的实施例可以用于将转发分组的负载卸载回分组发送者。 负载平衡器和/或NAT设备可以处理连接的前几个数据包，以形成连接映射，然后从连接的进一步通信中移除。 例如，负载平衡器或NAT设备基于第一个分组进行相应的负载平衡或NAT决定，然后将发送方通知该决定的数据。 从那时起，发送方可以直接将数据发送到接收方，而无需经过负载平衡器或NAT。

公开(公告)号：US20120082160A1

公开(公告)日：2012-04-05

申请号：US12895580

申请日：2010-09-30

申请人： Parveen Patel ,  Hasan Shamsuddin Alkhatib

发明人： Parveen Patel ,  Hasan Shamsuddin Alkhatib

IPC分类号： H04L12/56

CPC分类号： H04L45/741 ,  H04L29/12066 ,  H04L29/12358 ,  H04L45/04 ,  H04L61/1511 ,  H04L61/251

摘要： The present invention extends to methods, systems, and computer program products for routing using global address pairs. Embodiments of the invention use publicly routable Internet Protocol (“IP”) addresses to represent sites rather than individual hosts. Hosts can be represented by a global address pair, including site public IP address and a node private IP address. Nodes route packets to address processing modules using IP-in-IP encapsulation. An outer header contains a site public IP address and is destined to a site on inter-site links. An inner header contains a node private IP address and is destined to a private endpoint in intra-site links. In some embodiments, a site public IPv4 address and a node private IPv4 address are encoded into an IPv6 address. Use of an IPv6 address makes encoding of the two IPv4 address transparent to IPv6 applications.

摘要翻译： 本发明扩展到用于使用全局地址对进行路由的方法，系统和计算机程序产品。 本发明的实施例使用公共可路由的因特网协议（“IP”）地址来表示站点而不是单个主机。 主机可以由全局地址对表示，包括站点公共IP地址和节点专用IP地址。 节点使用IP-in-IP封装将数据包路由到地址处理模块。 外部头部包含站点公共IP地址，并且指向站点间链接上的站点。 内部头部包含节点专用IP地址，并且在站点内链接中指定为私有端点。 在一些实施例中，站点公共IPv4地址和节点专用IPv4地址被编码为IPv6地址。 使用IPv6地址可使两个IPv4地址的编码对IPv6应用程序透明。

公开(公告)号：US20110270908A1

公开(公告)日：2011-11-03

申请号：US12768750

申请日：2010-04-28

申请人： Randall Kern ,  Parveen Patel ,  Lihua Yuan ,  Anil K. Ruia ,  Won Suk Yoo

发明人： Randall Kern ,  Parveen Patel ,  Lihua Yuan ,  Anil K. Ruia ,  Won Suk Yoo

IPC分类号： G06F15/16

CPC分类号： H04L45/24

摘要： Architecture that facilitates the capture of connection state of a connection established between a client and an intermediate server and forwards the state to one or more target servers. A software component at the target server (as well as the intermediate server) uses this connection state to reply back to the client directly, thereby bypassing the intermediate server. All packets from the client related to the request are received at the intermediate server and then forwarded to the target server. The migration can be accomplished without any change in the client operating system and client applications, without assistance from a gateway device such as a load balancer or the network, without duplication of all packets between the multiple servers, and without changes to the transport layer stack of the intermediate and target servers.

摘要翻译： 架构，便于捕获在客户端和中间服务器之间建立的连接的连接状态，并将状态转发到一个或多个目标服务器。 目标服务器（以及中间服务器）上的软件组件使用此连接状态直接回复客户端，从而绕过中间服务器。 来自客户端的与请求相关的所有数据包都在中间服务器处接收，然后转发到目标服务器。 无需客户端操作系统和客户端应用程序的任何更改即可完成迁移，无需网关设备（如负载平衡器或网络）进行协助，而不会在多个服务器之间复制所有数据包，而无需更改传输层堆栈 的中间和目标服务器。

公开(公告)号：US20100302940A1

公开(公告)日：2010-12-02

申请号：US12605388

申请日：2009-10-26

申请人： Parveen Patel ,  Lihua Yuan ,  David Maltz ,  Albert Greenberg ,  Randy Kern

发明人： Parveen Patel ,  Lihua Yuan ,  David Maltz ,  Albert Greenberg ,  Randy Kern

IPC分类号： H04L12/56

CPC分类号： H04L61/103 ,  H04L12/4633 ,  H04L29/12028 ,  H04L45/04 ,  H04L45/24 ,  H04L67/1027

摘要： The present application relates to network configurations and specifically to scalable load balancing network configurations. One implementation includes an external client coupled to a scalable load balancing system. The scalable load balancing system includes a load balancing layer that is configured to encapsulate individual incoming packets of a packet flow from the external client. The load balancing layer is further configured to route the incoming packets to target devices on the system. The target devices can span multiple IP subnets. The incoming packets can pass through one or more load balancers of the load balancing layer before reaching individual target devices. Individual target devices can be configured to route at least some outgoing packets of the packet flow to the external client without passing through any of the one or more load balancers.

摘要翻译： 本申请涉及网络配置，具体涉及可伸缩负载平衡网络配置。 一个实现包括耦合到可伸缩负载平衡系统的外部客户端。 可扩展负载平衡系统包括负载平衡层，其被配置为封装来自外部客户端的分组流的各个输入分组。 负载平衡层还被配置为将传入的分组路由到系统上的目标设备。 目标设备可以跨越多个IP子网。 传入的数据包可以在到达各个目标设备之前通过负载平衡层的一个或多个负载平衡器。 可以将各个目标设备配置为将分组流的至少一些输出分组路由到外部客户端，而不通过任何一个或多个负载平衡器。

公开(公告)号：US08755283B2

公开(公告)日：2014-06-17

申请号：US12972340

申请日：2010-12-17

申请人： Parveen Patel ,  Volodymyr Ivanov ,  Marios Zikos ,  Vladimir Petter ,  Vyacheslav Kuznetsov ,  David Allen Dion

发明人： Parveen Patel ,  Volodymyr Ivanov ,  Marios Zikos ,  Vladimir Petter ,  Vyacheslav Kuznetsov ,  David Allen Dion

IPC分类号： H04L12/407

CPC分类号： H04L47/125 ,  H04L43/0876 ,  H04L45/22 ,  H04L47/11

摘要： The present invention extends to methods, systems, and computer program products for synchronizing state among load balancer components. Embodiments of the invention include load balancers using a consistent hashing algorithm to decide how new connections should be load balanced. Use of consistent hashing algorithm permits load balancers to work in a stateless manner in steady state. Load balancers start keeping flow state information (destination address for a given flow) about incoming packets when it is needed, i.e. such as, for example, when a change in destination host configuration is detected. State information is shared across load balancers in a deterministic way, which allows knowing which load balancer is authoritative (e.g., is the owner) for a given flow. Each load balancer can reach the authoritative load balancer to learn about a flow that cannot be determined locally.

摘要翻译： 本发明扩展到用于在负载均衡器组件之间同步状态的方法，系统和计算机程序产品。 本发明的实施例包括使用一致的散列算法来确定新连接应如何负载平衡的负载平衡器。 使用一致的散列算法可以使负载平衡器以稳定的状态工作。 负载平衡器在需要时开始保存关于输入分组的流状态信息（给定流的目的地地址），例如当检测到目的主机配置的改变时。 状态信息以确定性的方式在负载平衡器之间共享，这允许了解哪个负载均衡器对于给定流量是权威的（例如，是所有者）。 每个负载均衡器可以到达权威负载平衡器，以了解当地无法确定的流量。