公开(公告)号：US08341295B1

公开(公告)日：2012-12-25

申请号：US13435417

申请日：2012-03-30

申请人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

发明人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

IPC分类号： G06F15/173

CPC分类号： H04L63/102 ,  G06Q20/401 ,  H04L63/12 ,  H04L2463/101

摘要： Techniques are provided for using the mobility support features of IPv6 to allow client and server nodes to communicate without the continuing intervention of a load-balancing node that selected the server node. A load-balancing node intercepts a TCP SYN packet addressed to a virtual IP address. The load-balancing node selects a server node from among multiple server nodes, and sends the packet toward the server node. The server node sends an IPv6 packet toward the client node. The packet contains a Binding Update option that specifies the virtual IP address as a Home Address. This information causes the client node to replace destination addresses in outgoing IP packets so that packets that the client node would have sent toward the virtual IP address are sent toward the selected server node's IP address instead. Consequently, the IP packets are routed toward the selected server node instead of the load-balancing node.

摘要翻译： 提供了使用IPv6的移动性支持功能的技术，以允许客户端和服务器节点进行通信，而不需要选择服务器节点的负载平衡节点的持续干预。 负载平衡节点拦截寻址到虚拟IP地址的TCP SYN数据包。 负载平衡节点从多个服务器节点中选择服务器节点，并将数据包发送到服务器节点。 服务器节点向客户机节点发送一个IPv6数据包。 该分组包含一个绑定更新选项，该选项将虚拟IP地址指定为归属地址。 该信息使客户机节点替换出站IP数据包中的目的地址，使客户机节点向虚拟IP地址发送的数据包将被发送到所选服务器节点的IP地址。 因此，IP分组被路由到所选择的服务器节点而不是负载平衡节点。

公开(公告)号：US20120317338A1

公开(公告)日：2012-12-13

申请号：US13157289

申请日：2011-06-09

申请人： Letian YI ,  Chong (Ethan) HAO ,  Zaide LIU

发明人： Letian YI ,  Chong (Ethan) HAO ,  Zaide LIU

IPC分类号： G06F12/00 ,  G06F12/16

CPC分类号： G06F3/061 ,  G06F3/0647 ,  G06F3/0649 ,  G06F3/0685 ,  G06F3/0688 ,  G06F12/0868 ,  G06F2212/222 ,  G06F2212/463 ,  G06F2212/7208

摘要： A solid state disk (SSD) caches disk-based volumes in a heterogeneous storage system, improving the overall storage-system performance. The hottest data blocks are identified based on two factors: the frequency of access, and temporal locality. Temporal locality is computed using a logarithmic system time. IO latency is reduced by migrating these hottest data blocks from hard-disk-based volumes to the solid-state flash-memory disks. Some dedicated mapping metadata and a novel top-K B-tree structure are used to index the blocks. Data blocks are ranked by awarding a higher current value for recent accesses, but also by the frequency of accesses. A non-trivial value for accesses in the past is retained by accumulating the two factors over many time spans expressed as a logarithmic system time. Having two factors, access frequency and the logarithmic system time, provides for a more balanced caching system.

摘要翻译： 固态磁盘（SSD）在异构存储系统中缓存基于磁盘的卷，从而提高整体存储系统性能。 基于两个因素来识别最热的数据块：访问频率和时间局部性。 使用对数系统时间计算时间局部性。 通过将这些最热的数据块从基于硬盘的卷迁移到固态闪存盘来减少IO延迟。 一些专用的映射元数据和一个新的顶级K B树结构用于对块进行索引。 通过为最近的访问授予更高的当前值，而且通过访问的频率对数据块进行排名。 通过在以对数系统时间表示的许多时间跨度中累积两个因子来保留过去访问的非平凡值。 有两个因素，访问频率和对数系统时间，提供了一个更平衡的缓存系统。

公开(公告)号：US08078755B1

公开(公告)日：2011-12-13

申请号：US12635610

申请日：2009-12-10

申请人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

发明人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

IPC分类号： G06F15/173

CPC分类号： H04L63/102 ,  G06Q20/401 ,  H04L63/12 ,  H04L2463/101

摘要： Techniques are provided that allow client and server nodes to communicate without the continuing intervention of a load-balancing node that selected the server node. A load-balancing node intercepts a TCP SYN packet addressed to a virtual IP address. The load-balancing node selects a server node from among multiple server nodes, and sends the packet toward the server node. The server node sends an IPv6 packet toward the client node. The packet contains a Binding Update option that specifies the virtual IP address as a Home Address. This information causes the client node to replace destination addresses in outgoing IP packets so that packets that the client node would have sent toward the virtual IP address are sent toward the selected server node's IP address instead. Consequently, the IP packets are routed toward the selected server node instead of the load-balancing node.

摘要翻译： 提供了允许客户端和服务器节点进行通信的技术，而不需要选择服务器节点的负载平衡节点的持续干预。 负载平衡节点拦截寻址到虚拟IP地址的TCP SYN数据包。 负载平衡节点从多个服务器节点中选择服务器节点，并将数据包发送到服务器节点。 服务器节点向客户机节点发送一个IPv6数据包。 该分组包含一个绑定更新选项，该选项将虚拟IP地址指定为归属地址。 该信息使客户机节点替换出站IP数据包中的目的地址，使客户机节点向虚拟IP地址发送的数据包将被发送到所选服务器节点的IP地址。 因此，IP分组被路由到所选择的服务器节点而不是负载平衡节点。

公开(公告)号：US20100125649A1

公开(公告)日：2010-05-20

申请号：US12693413

申请日：2010-01-25

申请人： Richard David Day ,  Eric Sven-Johan Swildens ,  Edward Liu (Zaide Liu)

发明人： Richard David Day ,  Eric Sven-Johan Swildens ,  Edward Liu (Zaide Liu)

IPC分类号： G06F15/16

CPC分类号： H04L63/1458 ,  H04L29/12066 ,  H04L29/12113 ,  H04L43/0888 ,  H04L61/1511 ,  H04L61/1541 ,  H04L67/02 ,  H04L67/06 ,  H04L67/1002 ,  H04L67/1008 ,  H04L67/101 ,  H04L67/1029 ,  H04L67/1095 ,  H04L67/2847 ,  H04L67/2852 ,  H04L67/289 ,  H04L69/329

摘要： A dynamic image delivery system receives a client request for an image at an image caching server. The image caching server measures the client's network access speed and looks for an appropriate pre-rendered copy of the requested image that is rendered for the client's network access speed in local storage. If the appropriate rendered copy is found, then the image caching server sends the rendered image to the client. If it is not found, then the image caching server dynamically renders a copy of the image and sends it tot he client.

摘要翻译： 动态图像传送系统在图像缓存服务器处接收对图像的客户端请求。 图像缓存服务器测量客户端的网络访问速度，并查找为本地存储中的客户端网络访问速度呈现的请求映像的适当预呈现副本。 如果找到适当的渲染副本，则图像缓存服务器将呈现的映像发送到客户端。 如果没有找到，则图像缓存服务器会动态呈现图像的副本并将其发送给客户端。

公开(公告)号：US07650427B1

公开(公告)日：2010-01-19

申请号：US11143872

申请日：2005-06-01

申请人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

发明人： Zaide Liu ,  Richard David Day ,  Eric Sven-Johan Swildens

IPC分类号： G06F15/173

CPC分类号： H04L63/102 ,  G06Q20/401 ,  H04L63/12 ,  H04L2463/101

摘要： Techniques are provided for using the mobility support features of IPv6 to allow client and server nodes to communicate without the continuing intervention of a load-balancing node that selected the server node. A load-balancing node intercepts a TCP SYN packet addressed to a virtual IP address. The load-balancing node selects a server node from among multiple server nodes, and sends the packet toward the server node. The server node sends an IPv6 packet toward the client node. The packet contains a Binding Update option that specifies the virtual IP address as a Home Address. This information causes the client node to replace destination addresses in outgoing IP packets so that packets that the client node would have sent toward the virtual IP address are sent toward the selected server node's IP address instead. Consequently, the IP packets are routed toward the selected server node instead of the load-balancing node.

摘要翻译： 提供了使用IPv6的移动性支持功能的技术，以允许客户端和服务器节点进行通信，而不需要选择服务器节点的负载平衡节点的持续干预。 负载平衡节点拦截寻址到虚拟IP地址的TCP SYN数据包。 负载平衡节点从多个服务器节点中选择服务器节点，并将数据包发送到服务器节点。 服务器节点向客户机节点发送一个IPv6数据包。 该分组包含一个绑定更新选项，该选项将虚拟IP地址指定为归属地址。 该信息使客户机节点替换出站IP数据包中的目的地址，使客户机节点向虚拟IP地址发送的数据包将被发送到所选服务器节点的IP地址。 因此，IP分组被路由到所选择的服务器节点而不是负载平衡节点。

公开(公告)号：US08838895B2

公开(公告)日：2014-09-16

申请号：US13157289

申请日：2011-06-09

申请人： Letian Yi ,  Chong (Ethan) Hao ,  Zaide Liu

发明人： Letian Yi ,  Chong (Ethan) Hao ,  Zaide Liu

IPC分类号： G06F12/08

CPC分类号： G06F3/061 ,  G06F3/0647 ,  G06F3/0649 ,  G06F3/0685 ,  G06F3/0688 ,  G06F12/0868 ,  G06F2212/222 ,  G06F2212/463 ,  G06F2212/7208

摘要： A solid state disk (SSD) caches disk-based volumes in a heterogeneous storage system, improving the overall storage-system performance. The hottest data blocks are identified based on two factors: the frequency of access, and temporal locality. Temporal locality is computed using a logarithmic system time. IO latency is reduced by migrating these hottest data blocks from hard-disk-based volumes to the solid-state flash-memory disks. Some dedicated mapping metadata and a novel top-K B-tree structure are used to index the blocks. Data blocks are ranked by awarding a higher current value for recent accesses, but also by the frequency of accesses. A non-trivial value for accesses in the past is retained by accumulating the two factors over many time spans expressed as a logarithmic system time. Having two factors, access frequency and the logarithmic system time, provides for a more balanced caching system.

摘要翻译： 固态磁盘（SSD）在异构存储系统中缓存基于磁盘的卷，从而提高整体存储系统性能。 基于两个因素来识别最热的数据块：访问频率和时间局部性。 使用对数系统时间计算时间局部性。 通过将这些最热的数据块从基于硬盘的卷迁移到固态闪存盘来减少IO延迟。 一些专用的映射元数据和一个新的顶级K B树结构用于对块进行索引。 通过为最近的访问授予更高的当前值，而且通过访问的频率对数据块进行排名。 通过在以对数系统时间表示的许多时间跨度中累积两个因子来保留过去访问的非平凡值。 有两个因素，访问频率和对数系统时间，提供了一个更平衡的缓存系统。

公开(公告)号：US08504840B1

公开(公告)日：2013-08-06

申请号：US13323469

申请日：2011-12-12

申请人： Zaide Liu ,  Maurice Johnny Cinquini

发明人： Zaide Liu ,  Maurice Johnny Cinquini

IPC分类号： H04L29/06

CPC分类号： H04L63/102 ,  G06Q20/401 ,  H04L63/12 ,  H04L2463/101

摘要： A method and mechanism for protecting a website against defacement are provided. A content owner may associate content with a digital signature. The digital signature allows a recipient of the content to verify that the content originated from the content owner, and that the content has not been defaced. The digital signature may be comprised within the content, or stored external to the content, e.g., in a repository accessible to a Web cache server serving the content. To construct the digital signature, initially, the content owner creates a content validity value for a portion of content, the content validity value is encrypted to create the digital signature. The Web cache server may use the digital signature to determine whether the content has been defaced.

摘要翻译： 提供了一种保护网站免受污染的方法和机制。 内容所有者可以将内容与数字签名相关联。 数字签名允许内容的收件人验证内容源自内容所有者，并且内容没有被损坏。 数字签名可以包括在内容内，或者存储在内容外部，例如在服务于内容的Web缓存服务器可访问的存储库中。 为了构建数字签名，最初，内容所有者为内容的一部分创建内容有效性值，加密内容有效性值以创建数字签名。 Web缓存服务器可以使用数字签名来确定内容是否已经被损坏。

公开(公告)号：US08271793B2

公开(公告)日：2012-09-18

申请号：US12489375

申请日：2009-06-22

申请人： Eric Sven-Johan Swildens ,  Zaide Liu ,  Richard David Day ,  Pradeep Kumar Chetal

发明人： Eric Sven-Johan Swildens ,  Zaide Liu ,  Richard David Day ,  Pradeep Kumar Chetal

IPC分类号： H04L29/06 ,  H04L9/32

CPC分类号： H04L63/102 ,  G06Q20/401 ,  H04L63/12 ,  H04L2463/101

摘要： A dynamic multimedia fingerprinting system is provided. A user requests multimedia content from a Web cache server that verifies that the user is authorized to download the content. A custom fingerprint specific to the user is generated and dynamically inserted into the content as the content is delivered to the user. The custom fingerprint can be generated on the Web cache server or at the content provider's server. The system allows a content provider to specify where the custom fingerprint is inserted into the content or where the fingerprint is to replace a placeholder within the content.

摘要翻译： 提供动态多媒体指纹系统。 用户从Web缓存服务器请求多媒体内容，以验证用户是否被授权下载内容。 生成特定于用户的自定义指纹，并且当内容被传递给用户时，动态地插入到内容中。 可以在Web缓存服务器或内容提供商的服务器上生成自定义指纹。 该系统允许内容提供商指定自定义指纹插入到内容中的位置或指纹何处替换内容中的占位符。

公开(公告)号：US08204976B2

公开(公告)日：2012-06-19

申请号：US13014127

申请日：2011-01-26

申请人： Eric Sven-Johan Swildens ,  Zaide Liu ,  Richard David Day

发明人： Eric Sven-Johan Swildens ,  Zaide Liu ,  Richard David Day

IPC分类号： G06F15/173

CPC分类号： H04L67/1002 ,  G06F9/505 ,  G06F2209/5016 ,  G06F2209/508 ,  H04L29/12066 ,  H04L29/12132 ,  H04L41/5029 ,  H04L41/5038 ,  H04L41/509 ,  H04L43/00 ,  H04L43/0829 ,  H04L43/0852 ,  H04L43/12 ,  H04L61/1511 ,  H04L61/1552 ,  H04L67/02 ,  H04L67/101 ,  H04L67/1036 ,  H04L67/142

摘要： A method and apparatus for serving content requests using global and local load balancing techniques is provided. Web site content is cached using two or more point of presences (POPs), wherein each POP has at least one DNS server. Each DNS server is associated with the same anycast IP address. A domain name resolution request is transmitted to the POP in closest network proximity for resolution based on the anycast IP address. Once the domain name resolution request is received at a particular POP, local load balancing techniques are performed to dynamically select the appropriate Web server at the POP for use in resolving the domain name resolution request. Approaches are described for handling bursts of traffic at a particular POP, security, and recovering from the failure of various components of the system.

摘要翻译： 提供了一种使用全局和局部负载平衡技术来提供内容请求的方法和装置。 使用两个或多个存在点（POPs）缓存网站内容，其中每个POP具有至少一个DNS服务器。 每个DNS服务器与相同的任播IP地址相关联。 域名解析请求以最接近的网络接近传输到POP，以便基于anycast IP地址进行分辨。 一旦在特定POP上接收到域名解析请求，则执行本地负载平衡技术以在POP处动态选择适当的Web服务器，以用于解析域名解析请求。 描述了处理特定POP，安全性的业务突发以及从系统的各种组件的故障中恢复的方法。

公开(公告)号：US20060112176A1

公开(公告)日：2006-05-25

申请号：US11264616

申请日：2005-10-31

申请人： Zaide Liu ,  Eric Swildens ,  Richard Day

发明人： Zaide Liu ,  Eric Swildens ,  Richard Day

IPC分类号： G06F15/173

CPC分类号： H04L63/1408 ,  H04L29/12066 ,  H04L29/12113 ,  H04L29/12132 ,  H04L29/12811 ,  H04L61/1511 ,  H04L61/1541 ,  H04L61/1552 ,  H04L61/6009 ,  H04L63/1458 ,  H04L67/02 ,  H04L67/06 ,  H04L67/1002 ,  H04L67/1008 ,  H04L67/101 ,  H04L67/1021 ,  H04L67/1095 ,  H04L67/2852 ,  H04L67/289 ,  H04L69/329 ,  H04L2029/06054

摘要： A distributed DNS network includes a central origin server that actually controls the zone, and edge DNS cache servers configured to cache the DNS content of the origin server. The edge DNS cache servers are published as the authoritative servers for customer domains instead of the origin server. When a request for a DNS record results in a cache miss, the edge DNS cache servers get the information from the origin server and cache it for use in response to future requests. Multiple edge DNS cache servers can be deployed at multiple locations. Since an unlimited number of edge DNS cache servers can be deployed, the system is highly scalable. The disclosed techniques protect against DoS attacks, as DNS requests are not made to the origin server directly.