公开(公告)号：US09021510B2

公开(公告)日：2015-04-28

申请号：US13584359

申请日：2012-08-13

申请人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

IPC分类号： G06F15/173 ,  G06F9/54

CPC分类号： G06F9/547

摘要： A service module that provides for discovery of one or more network interfaces connecting a prospective remote procedure call (RPC) client, facilitates the provision of RPC programs in a network including multi-horned systems. When a request for a network address to an RPC application providing an RPC program is received from the RPC client, the RPC bind daemon discovers from the module, using the client response address, over which interface(s) the client is accessible. The daemon then selects an address of a network path to the RPC application that the prospective client can access and returns the corresponding network address. The service module monitors the network stack for RPC get address requests and builds tables of client address entries with corresponding network interface identifiers. The entries are retired according to an aging policy.

摘要翻译： 提供用于发现连接预期远程过程调用（RPC）客户端的一个或多个网络接口的服务模块，有助于在包括多角度系统的网络中提供RPC程序。 当从RPC客户端接收到提供RPC程序的RPC应用程序的网络地址的请求时，RPC绑定守护程序使用客户端响应地址从模块发现客户端可访问哪个接口。 守护程序然后选择预期客户端可以访问的RPC应用程序的网络路径的地址，并返回相应的网络地址。 服务模块监视网络堆栈以获取RPC获取地址请求，并使用相应的网络接口标识符构建客户端地址表的表。 这些条目根据老龄化政策退休。

公开(公告)号：US20120324483A1

公开(公告)日：2012-12-20

申请号：US13584359

申请日：2012-08-13

申请人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

IPC分类号： G06F9/44

CPC分类号： G06F9/547

摘要： A service module that provides for discovery of one or more network interfaces connecting a prospective remote procedure call (RPC) client, facilitates the provision of RPC programs in a network including multi-horned systems. When a request for a network address to an RPC application providing an RPC program is received from the RPC client, the RPC bind daemon discovers from the module, using the client response address, over which interface(s) the client is accessible. The daemon then selects an address of a network path to the RPC application that the prospective client can access and returns the corresponding network address. The service module monitors the network stack for RPC get address requests and builds tables of client address entries with corresponding network interface identifiers. The entries are retired according to an aging policy.

摘要翻译： 提供用于发现连接预期远程过程调用（RPC）客户端的一个或多个网络接口的服务模块，有助于在包括多角度系统的网络中提供RPC程序。 当从RPC客户端接收到提供RPC程序的RPC应用程序的网络地址的请求时，RPC绑定守护程序使用客户端响应地址从模块发现客户端可访问哪个接口。 守护程序然后选择预期客户端可以访问的RPC应用程序的网络路径的地址，并返回相应的网络地址。 服务模块监视网络堆栈以获取RPC获取地址请求，并使用相应的网络接口标识符构建客户端地址表的表。 这些条目根据老龄化政策退休。

公开(公告)号：US08266639B2

公开(公告)日：2012-09-11

申请号：US12631016

申请日：2009-12-04

申请人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

IPC分类号： G06F9/44

CPC分类号： G06F9/547

摘要： A service module that provides for discovery of one or more network interfaces connecting a prospective remote procedure call (RPC) client, facilitates the provision of RPC programs in a network including multi-horned systems. When a request for a network address to an RPC application providing an RPC program is received from the RPC client, the RPC bind daemon discovers from the module, using the client response address, over which interface(s) the client is accessible. The daemon then selects an address of a network path to the RPC application that the prospective client can access and returns the corresponding network address. The service module monitors the network stack for RPC get address requests and builds tables of client address entries with corresponding network interface identifiers. The entries are retired according to an aging policy. When multiple network paths to the RPC application are available, the service can be selected using a heuristic such as preferred interface, non-firewalled interface, least number of return path links or other criteria.

摘要翻译： 提供用于发现连接预期远程过程调用（RPC）客户端的一个或多个网络接口的服务模块，有助于在包括多角度系统的网络中提供RPC程序。 当从RPC客户端接收到提供RPC程序的RPC应用程序的网络地址的请求时，RPC绑定守护程序使用客户端响应地址从模块发现客户端可访问哪个接口。 守护程序然后选择预期客户端可以访问的RPC应用程序的网络路径的地址，并返回相应的网络地址。 服务模块监视网络堆栈以获取RPC获取地址请求，并使用相应的网络接口标识符构建客户端地址表的表。 这些条目根据老龄化政策退休。 当到达RPC应用程序的多个网络路径可用时，可以使用诸如首选接口，非防火墙接口，最少数量的返回路径链路或其他标准的启发式来选择服务。

公开(公告)号：US20110138404A1

公开(公告)日：2011-06-09

申请号：US12631016

申请日：2009-12-04

申请人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Andrew Dunshea ,  Nikhil Hegde ,  Paul H. Hernandez ,  Aruna Yedavilli

IPC分类号： G06F13/00 ,  G06F15/173

CPC分类号： G06F9/547

摘要： A service module that provides for discovery of one or more network interfaces connecting a prospective remote procedure call (RPC) client, facilitates the provision of RPC programs in a network including multi-horned systems. When a request for a network address to an RPC application providing an RPC program is received from the RPC client, the RPC bind daemon discovers from the module, using the client response address, over which interface(s) the client is accessible. The daemon then selects an address of a network path to the RPC application that the prospective client can access and returns the corresponding network address. The service module monitors the network stack for RPC get address requests and builds tables of client address entries with corresponding network interface identifiers. The entries are retired according to an aging policy. When multiple network paths to the RPC application are available, the service can be selected using a heuristic such as preferred interface, non-firewalled interface, least number of return path links or other criteria.

摘要翻译： 提供用于发现连接预期远程过程调用（RPC）客户端的一个或多个网络接口的服务模块，有助于在包括多角度系统的网络中提供RPC程序。 当从RPC客户端接收到提供RPC程序的RPC应用程序的网络地址的请求时，RPC绑定守护程序使用客户端响应地址从模块发现客户端可访问哪个接口。 守护程序然后选择预期客户端可以访问的RPC应用程序的网络路径的地址，并返回相应的网络地址。 服务模块监视网络堆栈以获取RPC获取地址请求，并使用相应的网络接口标识符构建客户端地址表的表。 这些条目根据老龄化政策退休。 当到达RPC应用程序的多个网络路径可用时，可以使用诸如首选接口，非防火墙接口，最少数量的返回路径链路或其他标准的启发式来选择服务。

公开(公告)号：US09516142B2

公开(公告)日：2016-12-06

申请号：US13459160

申请日：2012-04-28

申请人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

IPC分类号： H04L29/08 ,  H04L29/06 ,  H04L12/801 ,  H04L12/807 ,  H04L12/26

CPC分类号： H04L67/1097 ,  H04L43/16 ,  H04L47/193 ,  H04L47/27 ,  H04L47/822 ,  H04L63/1458 ,  H04L67/143 ,  H04L69/16 ,  H04L69/163

摘要： A method, programmed medium and system are provided for preventing the denial of file system access to a plurality of clients accessing a NFS server. In one example, an NFS server is configured to listen on a server port. The server runs a separate daemon which “watches” client requests as they are received at the NFS server. The server processing system tracks the number of times a client sends consecutive TCP zero-window packets in response to a data packet from the server. If the number of zero-window packets crosses a user-defined threshold, then a routine is called to stop responding to that client using a backoff algorithm. When the server reaches a point where the number of available threads or any other relevant resource dips below a user-defined threshold, the server process starts terminating connections to the clients starting from the ones with the oldest entry in the table.

摘要翻译： 提供了一种编程介质和系统的方法，用于防止文件系统访问访问NFS服务器的多个客户机的访问。 在一个示例中，NFS服务器配置为在服务器端口上侦听。 服务器运行一个单独的守护进程，它在NFS服务器上收到客户端请求。 服务器处理系统跟踪客户端响应于来自服务器的数据分组发送连续的TCP零窗口分组的次数。 如果零窗口数据包的数量跨越用户定义的阈值，则调用例程以使用退避算法停止对该客户端的响应。 当服务器达到可用线程数或任何其他相关资源下降到低于用户定义阈值的点时，服务器进程将从具有表中最早条目的服务器开始终止与客户端的连接。

公开(公告)号：US20120215916A1

公开(公告)日：2012-08-23

申请号：US13459160

申请日：2012-04-28

申请人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

IPC分类号： G06F15/173

CPC分类号： H04L67/1097 ,  H04L43/16 ,  H04L47/193 ,  H04L47/27 ,  H04L47/822 ,  H04L63/1458 ,  H04L67/143 ,  H04L69/16 ,  H04L69/163

摘要： A method, programmed medium and system are provided for preventing the denial of file system access to a plurality of clients accessing a NFS server. In one example, an NFS server is configured to listen on a server port. The server runs a separate daemon which “watches” client requests as they are received at the NFS server. The server processing system tracks the number of times a client sends consecutive TCP zero-window packets in response to a data packet from the server. If the number of zero-window packets crosses a user-defined threshold, then a routine is called to stop responding to that client using a backoff algorithm. When the server reaches a point where the number of available threads or any other relevant resource dips below a user-defined threshold, the server process starts terminating connections to the clients starting from the ones with the oldest entry in the table.

摘要翻译： 提供了一种编程介质和系统的方法，用于防止文件系统访问访问NFS服务器的多个客户机的访问。 在一个示例中，NFS服务器配置为在服务器端口上侦听。 服务器运行一个单独的守护进程，它在NFS服务器上收到客户端请求。 服务器处理系统跟踪客户端响应于来自服务器的数据分组发送连续的TCP零窗口分组的次数。 如果零窗口数据包的数量跨越用户定义的阈值，则调用例程以使用退避算法停止对该客户端的响应。 当服务器达到可用线程数或任何其他相关资源下降到低于用户定义阈值的点时，服务器进程将从具有表中最早条目的服务器开始终止与客户端的连接。

公开(公告)号：US20110113134A1

公开(公告)日：2011-05-12

申请号：US12614511

申请日：2009-11-09

申请人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Radhika Chirra ,  Nikhil Hegde ,  Aruna Yedavilli

IPC分类号： G06F15/173

CPC分类号： H04L67/1097 ,  H04L43/16 ,  H04L47/193 ,  H04L47/27 ,  H04L47/822 ,  H04L63/1458 ,  H04L67/143 ,  H04L69/16 ,  H04L69/163

摘要： A method, programmed medium and system are provided for preventing the denial of file system access to a plurality of clients accessing a NFS server. In one example, an NFS server is configured to listen on a server port. The server runs a separate daemon which “watches” client requests as they are received at the NFS server. The server processing system tracks the number of times a client sends consecutive TCP zero-window packets in response to a data packet from the server. If the number of zero-window packets crosses a user-defined threshold, then a routine is called to stop responding to that client using a backoff algorithm. When the server reaches a point where the number of available threads or any other relevant resource dips below a user-defined threshold, the server process starts terminating connections to the clients starting from the ones with the oldest entry in the table.

摘要翻译： 提供了一种编程介质和系统的方法，用于防止文件系统访问访问NFS服务器的多个客户机的访问。 在一个示例中，NFS服务器配置为在服务器端口上侦听。 服务器运行一个单独的守护进程，它在NFS服务器上收到客户端请求。 服务器处理系统跟踪客户端响应于来自服务器的数据分组发送连续的TCP零窗口分组的次数。 如果零窗口数据包的数量跨越用户定义的阈值，则调用例程以使用退避算法停止对该客户端的响应。 当服务器达到可用线程数或任何其他相关资源下降到低于用户定义阈值的点时，服务器进程将从具有表中最早条目的服务器开始终止与客户端的连接。

公开(公告)号：US20110066851A1

公开(公告)日：2011-03-17

申请号：US12558744

申请日：2009-09-14

申请人： Adekunle Bello ,  Radhika Chirra ,  Venkat Venkatsubra ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Radhika Chirra ,  Venkat Venkatsubra ,  Aruna Yedavilli

IPC分类号： H04L9/00 ,  G06F15/173

CPC分类号： H04L63/04 ,  H04L45/42 ,  H04L63/08 ,  H04L63/105

摘要： A computer implemented method and computer program product for obtaining a secure route. A trusted host sets a node security association for a trusted host. The trusted host receives, at the trusted host, a client communication request directed to a destination host. The trusted host builds a secure route query comprising a trusted host address, a destination host address, and at least one security level, to form at least one secure route. The trusted host sends packets from the trusted host to the destination host based on the at least one secure route. The packets are responsive to the client communication request, and the packets each have a security label that matches the security level.

摘要翻译： 一种用于获得安全路线的计算机实现的方法和计算机程序产品。 可信主机为可信主机设置节点安全关联。 可信主机在受信任的主机处接收指向目的地主机的客户端通信请求。 可信主机构建包括可信主机地址，目的主机地址和至少一个安全级别的安全路由查询，以形成至少一个安全路由。 可信主机基于至少一个安全路由将信息包从可信主机发送到目的地主机。 分组响应于客户端通信请求，并且分组各自具有与安全级别匹配的安全标签。

公开(公告)号：US08356099B2

公开(公告)日：2013-01-15

申请号：US13459193

申请日：2012-04-29

申请人： Adekunle Bello ,  Douglas Griffith ,  Somasundaram Krishnasamy ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Douglas Griffith ,  Somasundaram Krishnasamy ,  Aruna Yedavilli

IPC分类号： G06F15/16

CPC分类号： G06F9/5038 ,  G06F2209/5021

摘要： A method, programmed medium and system are disclosed which provide for end-to-end QoS for a set of processes that comprise a workload over nfs. A set of processes that comprise a workload such as the processes of a WPAR, or an entire LPAR are given a class designation and assigned priority/limits. The data are then passed to the server which allocates resources based on the sum total of all the current classes and their priorities and/or limits. This requires re-engineering the nfs client code to be workload-aware and the nfs server code to accommodate the resource allocation and prioritization needs of the nfs clients.

摘要翻译： 公开了一种方法，编程介质和系统，其为包括nfs上的工作负载的一组进程提供端到端QoS。 给出了一组包含WPAR或整个LPAR的工作负载的进程，并给出了类别指定和分配的优先级/限制。 然后将数据传递给服务器，该服务器根据所有当前类及其优先级和/或限制的总和来分配资源。 这需要重新设计nfs客户端代码以使工作负载感知和nfs服务器代码适应nfs客户端的资源分配和优先级排序。

公开(公告)号：US20140006854A1

公开(公告)日：2014-01-02

申请号：US13539673

申请日：2012-07-02

申请人： Adekunle Bello ,  Aruna Yedavilli

发明人： Adekunle Bello ,  Aruna Yedavilli

IPC分类号： G06F11/07

CPC分类号： G06F11/0757 ,  G06F11/0736

摘要： File system errors are handled and computing systems are recovered by, responsive to receiving a page buffer request, initializing a sleep timer according to a detection interval value plus a hang resolution range value; responsive to the timer expiring, detecting that a process, thread, application program, daemon, or task is waiting on availability of the requested page buffer; and responsive to the detection, quarantining metadata associated with the requested page buffer, failing the page buffer request and releasing one or more locks on the requested page buffer. This process is then optionally repeated for additional processes, threads, application programs, daemons, tasks or combinations thereof which are waiting for availability of the requested page buffer, optionally randomizing the detection interval value in order to avoid an instantaneous recovery from the error.

摘要翻译： 通过响应于接收到页面缓冲器请求，根据检测间隔值加上挂起分辨率范围值初始化睡眠定时器来处理文件系统错误并且恢复计算系统; 响应于定时器到期，检测进程，线程，应用程序，守护程序或任务正在等待所请求的页缓冲器的可用性; 并且响应于检测，隔离与所请求的页面缓冲器相关联的元数据，不执行页面缓冲器请求并释放所请求的页面缓冲器上的一个或多个锁定。 然后可选地重复该进程，用于正在等待所请求的页面缓冲区的可用性的附加进程，线程，应用程序，守护程序，任务或其组合，可选地随机化该检测间隔值，以避免从错误中即时恢复。