公开(公告)号：US20090207833A1

公开(公告)日：2009-08-20

申请号：US12031076

申请日：2008-02-14

申请人： Edgar Chung ,  Puneet Agarwal ,  Shailesh Maskai

发明人： Edgar Chung ,  Puneet Agarwal ,  Shailesh Maskai

IPC分类号： H04L12/66

CPC分类号： H04L12/66

摘要： A method includes for determining a plurality of fields of a packet associated with a routing of the packet, wherein each field of the plurality of fields includes one or more bits. Arranging the bits of the plurality of fields into a plurality of ordered partitions of a search sequence, the search sequence being associated with a plurality of searches, wherein the searches are based on the bits included in one or more of the ordered partitions. Providing, to a routing table including routing information associated with the routing of the packet, one or more of the ordered partitions of the search sequence, wherein the routing table is structured based on the search sequence. Receiving, based on the plurality of searches, the routing information associated with the routing of the packet from the routing table. Routing the packet based on the routing information.

摘要翻译： 一种方法包括：确定与所述分组的路由相关联的分组的多个字段，其中所述多个字段的每个字段包括一个或多个比特。 将所述多个字段的位排列成搜索序列的多个有序分区，所述搜索序列与多个搜索相关联，其中所述搜索基于包括在所述有序分区中的一个或多个中的比特。 向包括与分组的路由相关联的路由信息​​的路由表提供搜索序列的一个或多个有序分区，其中基于搜索序列来构建路由表。 基于所述多个搜索，接收与所述路由表中的所述分组的路由相关联的路由信息​​。 基于路由信息路由数据包。

公开(公告)号：US08040882B2

公开(公告)日：2011-10-18

申请号：US12031076

申请日：2008-02-14

申请人： Edgar Chung ,  Puneet Agarwal ,  Shailesh Maskai

发明人： Edgar Chung ,  Puneet Agarwal ,  Shailesh Maskai

IPC分类号： H04L12/28

CPC分类号： H04L12/66

摘要： A method includes for determining a plurality of fields of a packet associated with a routing of the packet, wherein each field of the plurality of fields includes one or more bits. Arranging the bits of the plurality of fields into a plurality of ordered partitions of a search sequence, the search sequence being associated with a plurality of searches, wherein the searches are based on the bits included in one or more of the ordered partitions. Providing, to a routing table including routing information associated with the routing of the packet, one or more of the ordered partitions of the search sequence, wherein the routing table is structured based on the search sequence. Receiving, based on the plurality of searches, the routing information associated with the routing of the packet from the routing table. Routing the packet based on the routing information.

摘要翻译： 一种方法包括：确定与所述分组的路由相关联的分组的多个字段，其中所述多个字段的每个字段包括一个或多个比特。 将所述多个字段的位排列成搜索序列的多个有序分区，所述搜索序列与多个搜索相关联，其中所述搜索基于包括在所述有序分区中的一个或多个中的比特。 向包括与分组的路由相关联的路由信息​​的路由表提供搜索序列的一个或多个有序分区，其中基于搜索序列来构建路由表。 基于所述多个搜索，接收与所述路由表中的所述分组的路由相关联的路由信息​​。 基于路由信息路由数据包。

公开(公告)号：US20090276604A1

公开(公告)日：2009-11-05

申请号：US12199409

申请日：2008-08-27

申请人： Brian Baird ,  Shailesh Maskai ,  Puneet Agarwal

发明人： Brian Baird ,  Shailesh Maskai ,  Puneet Agarwal

IPC分类号： G06F12/10 ,  G06F12/16 ,  G06F12/00

CPC分类号： G06F12/0653

摘要： Various example implementations are disclosed. According to one example, an integrated circuit may include a key extractor, a translation table block, and a memory assigner. The key extractor may be configured to receive data, extract key-related information from the data, and send the key-related information to a first memory device. The translation table block may be configured to update a mapping table based on a memory assigner assigning physical portions of the first memory device to each of a plurality of address types, receive an index from the first memory device in response to the key extractor sending the key-related information to the first memory device, and send a data request to a second memory device based on the received index, the data request identifying a physical portion of the second memory device.

摘要翻译： 公开了各种示例实现。 根据一个示例，集成电路可以包括密钥提取器，转换表块和存储器分配器。 密钥提取器可以被配置为接收数据，从数据中提取密钥相关信息，并将密钥相关信息发送到第一存储器设备。 翻译表块可以被配置为基于存储器分配器来更新映射表，所述存储器分配器将第一存储器件的物理部分分配给多个地址类型中的每一个，响应于密钥提取器发送第一存储器设备的索引，从第一存储器设备接收索引 密钥相关信息发送到第一存储器设备，并且基于接收到的索引向第二存储器设备发送数据请求，该数据请求标识第二存储器设备的物理部分。

公开(公告)号：US09043450B2

公开(公告)日：2015-05-26

申请号：US12580094

申请日：2009-10-15

申请人： Rupa Budhia ,  Puneet Agarwal

发明人： Rupa Budhia ,  Puneet Agarwal

IPC分类号： G06F15/177 ,  G06F9/50 ,  H04L29/08

CPC分类号： G06F9/5044 ,  G06F2209/509 ,  H04L69/32

摘要： An system comprising an ingress device configured to receive and process data, wherein the ingress device comprises a plurality of processing stages configured to process the data, wherein a configurable subset of the stages comprises a selectable tap point, and wherein the ingress device is further configured to, upon reaching a selected tap point, suspend processing and send at least a portion of the data to another device; an offload engine device configured to receive data from the ingress device, after the selected tap point has been reached, and to provide additional processing of the data, which the ingress device is not configured to provide; an egress device configured to transmit the data that has been additionally processed by the offload engine device.

摘要翻译： 一种包括被配置为接收和处理数据的入口设备的系统，其中所述入口设备包括被配置为处理所述数据的多个处理级，其中所述级的可配置子集包括可选择的抽头点，并且其中所述入口设备被进一步配置 在到达所选择的分接点之后，暂停处理并将至少一部分数据发送到另一设备; 卸载引擎装置，其被配置为在到达所选择的分接点之后从所述入口设备接收数据，并且为所述数据提供附加处理，所述数据是入口设备未被配置为提供的; 被配置为发送由卸载引擎设备另外处理的数据的出口设备。

公开(公告)号：US08824284B2

公开(公告)日：2014-09-02

申请号：US12780524

申请日：2010-05-14

申请人： Brad Matthews ,  Bruce Kwan ,  Puneet Agarwal

发明人： Brad Matthews ,  Bruce Kwan ,  Puneet Agarwal

IPC分类号： H04J1/16 ,  H04L12/56

CPC分类号： H04L47/39 ,  H04L43/026 ,  H04L45/00 ,  H04L45/302 ,  H04L45/745 ,  H04L47/125 ,  H04L47/2441 ,  H04L47/41 ,  Y02D50/30

摘要： Methods and apparatus for dynamic load balancing using virtual link credit accounting are disclosed. An example method includes receiving, at a network device, a data packet to be communicated using an aggregation group, the aggregation group including a plurality of virtual links having a common destination. The example method further includes determining a hash value based on the packet and determining an assigned virtual link of the plurality of virtual links based on the hash value. The example method also includes reducing a number of available transmission credits for the aggregation group and reducing a number of available transmission credits for the assigned virtual link. The example method still further includes communicating the packet to another network device using the assigned virtual link.

摘要翻译： 披露了使用虚拟链接信用账户进行动态负载均衡的方法和装置。 一种示例方法包括在网络设备处接收要使用聚合组进行传送的数据分组，所述聚合组包括具有公共目的地的多个虚拟链路。 该示例方法还包括基于分组确定散列值，并且基于该散列值确定多个虚拟链路中的分配的虚拟链路。 该示例方法还包括减少用于聚合组的可用传输信用数量，并减少所分配的虚拟链路的可用传输信用数量。 该示例方法还包括使用分配的虚拟链路将分组传送到另一网络设备。

公开(公告)号：US08782755B2

公开(公告)日：2014-07-15

申请号：US12409223

申请日：2009-03-23

申请人： James Harris ,  Rui Li ,  Arkesh Kumar ,  Ravindranath Thakur ,  Puneet Agarwal ,  Akshat Choudhary

发明人： James Harris ,  Rui Li ,  Arkesh Kumar ,  Ravindranath Thakur ,  Puneet Agarwal ,  Akshat Choudhary

IPC分类号： G06F15/16 ,  G06F9/455 ,  G06F21/53 ,  G06F21/31 ,  H04L29/06 ,  H04L29/08

CPC分类号： H04L63/0876 ,  G06F21/31 ,  G06F21/53 ,  G06F2009/4557 ,  H04L63/08 ,  H04L63/0884 ,  H04L63/10 ,  H04L63/105 ,  H04L63/166 ,  H04L63/20 ,  H04L67/2814

摘要： The present invention provides a system and method for dynamically selecting an authentication virtual server from a plurality of authentication virtual servers. A traffic management virtual server may determine from a request received from a client to access content of a server that the client has not been authenticated. The traffic management virtual server can identify a policy for selecting an authentication virtual server to provide authentication of the client. Responsive to the identification, the traffic management virtual server can select, via the policy, an authentication virtual server of the plurality of authentication virtual servers to authenticate the client. Responsive to the request, the traffic management virtual server may transmit a response to the client The response includes an instruction to redirect to the selected authentication virtual server.

摘要翻译： 本发明提供一种用于从多个认证虚拟服务器动态选择认证虚拟服务器的系统和方法。 流量管理虚拟服务器可以根据从客户端接收的请求来确定访问客户端尚未认证的服务器的内容。 流量管理虚拟服务器可以识别用于选择认证虚拟服务器以提供客户端认证的策略。 响应于识别，流量管理虚拟服务器可以通过策略选择多个认证虚拟服务器的认证虚拟服务器来认证客户端。 响应于该请求，流量管理虚拟服务器可以向客户端发送响应。该响应包括重定向到所选择的认证虚拟服务器的指令。

公开(公告)号：US08484718B2

公开(公告)日：2013-07-09

申请号：US11462230

申请日：2006-08-03

申请人： Vinoo Chacko ,  Puneet Agarwal ,  Shashi Nanjudaswamy ,  Ajay Soni

发明人： Vinoo Chacko ,  Puneet Agarwal ,  Shashi Nanjudaswamy ,  Ajay Soni

IPC分类号： G06F9/00

CPC分类号： H04L63/0272 ,  G06F21/552 ,  G06F21/6218 ,  H04L63/08 ,  H04L63/102

摘要： Methods for enabling assured records using fine grained auditing of virtual private network traffic include establishing, by an appliance, a transport layer virtual private network connection with a client operated by a user; receiving, by the appliance via the connection, a request from the client identifying a resource; determining, by the appliance, the request meets at least one security condition; transmitting, by the appliance to an audit log, a record of the request; receiving, by the appliance from the audit log, a confirmation that the record was logged; and granting, responsive to the received confirmation, access to the identified resource. Security conditions may identify at least one user, at least one application, a network or group of networks, and one or more resources. Corresponding systems are also described.

摘要翻译： 使用对虚拟专用网络流量进行细粒度审计的保证记录的方法包括由设备建立与用户操作的客户端的传输层虚拟专用网络连接; 通过连接从设备接收识别资源的客户端的请求; 由所述设备确定所述请求满足至少一个安全条件; 由设备向审核日志传送请求的记录; 设备从审核日志接收记录记录的确认; 以及响应于所接收的确认，授予对所识别的资源的访问。 安全条件可以标识至少一个用户，至少一个应用，网络或网络组，以及一个或多个资源。 还描述了相应的系统。

公开(公告)号：US08484287B2

公开(公告)日：2013-07-09

申请号：US12851449

申请日：2010-08-05

申请人： Anil Kumar Gavini ,  Akshat Choudhary ,  Puneet Agarwal

发明人： Anil Kumar Gavini ,  Akshat Choudhary ,  Puneet Agarwal

IPC分类号： G06F15/16

CPC分类号： G06F9/5027 ,  G06F2209/5016 ,  H04L67/02 ,  H04L67/2804 ,  H04L67/2819

摘要： The present solution is directed towards systems and methods for managing cookies by a multi-core device. The device is intermediary to a client and one or more servers. A first core of a multi-core device receives a response from a server to a request of the client through a user session. The response comprises a cookie. The first core removes the cookie from the response and stores the cookie in a corresponding storage for the session. The first core forwards the response without the cookie to the client. A second core then receives via a session, a second request from the client. The second core determines the identification of the first core as owner of the session from the second request. The second core then communicates to the first core a third request for cookie information for the session.

摘要翻译： 目前的解决方案涉及用于通过多核设备管理Cookie的系统和方法。 该设备是客户端和一个或多个服务器的中介。 多核设备的第一核心通过用户会话接收从服务器到客户端的请求的响应。 响应包括一个cookie。 第一个核心从响应中删除cookie，并将cookie存储在会话的相应存储中。 第一个核心将没有cookie的响应转发给客户端。 然后，第二核心经由会话接收来自客户端的第二请求。 第二核确定第一个核心作为第二个请求中的会话的所有者的标识。 然后，第二个核心向第一个核心传达第三个会话Cookie信息请求。

公开(公告)号：US20130155859A1

公开(公告)日：2013-06-20

申请号：US13523994

申请日：2012-06-15

申请人： Bruce Kwan ,  Puneet Agarwal

发明人： Bruce Kwan ,  Puneet Agarwal

IPC分类号： H04L12/24

CPC分类号： H04L49/9005 ,  H04L47/6215 ,  H04L49/9036

摘要： A system and method for hierarchical adaptive dynamic egress port and queue buffer management. Efficient utilization of buffering resources in a commodity shared memory buffer switch is key to minimizing packet loss. Efficient utilization of buffering resources is enabled through adaptive queue limits that are derived from an adaptive port limit.

摘要翻译： 一种用于分层自适应动态出口端口和队列缓冲区管理的系统和方法。 在商品共享内存缓冲交换机中高效利用缓冲资源是最大限度地减少数据包丢失的关键。 通过从自适应端口限制导出的自适应队列限制，能够有效利用缓冲资源。

公开(公告)号：US08437252B2

公开(公告)日：2013-05-07

申请号：US12945699

申请日：2010-11-12

申请人： Bruce Kwan ,  Puneet Agarwal

发明人： Bruce Kwan ,  Puneet Agarwal

IPC分类号： H04J1/16

CPC分类号： H04L47/10 ,  H04L47/11 ,  H04L47/12 ,  H04L47/2466 ,  H04L47/26 ,  H04L47/283 ,  H04L47/31 ,  H04L47/33

摘要： Apparatus and methods for intelligent congestion feedback are disclosed. An example apparatus includes a data interface configured to receive data packets from a source endpoint via an intermediate node. The data packets include a field indicating whether data congestion for data being sent to the destination endpoint is occurring. The example apparatus also includes a timer. The example apparatus further includes a feedback loop interface configured to selectively enable a feedback loop to the source endpoint and to transmit congestion notification (CN) messages to the source endpoint over the feedback loop. Upon receiving a data packet indicating that congestion has occurred due to the data packets from the source endpoint to the destination endpoint, the destination endpoint is configured to set the timer to a preset time value; start the timer reverse counting from the preset time value to zero, enable the feedback loop and transmit the CN messages.

摘要翻译： 公开了用于智能拥塞反馈的装置和方法。 示例性设备包括被配置为经由中间节点从源端点接收数据分组的数据接口。 数据分组包括指示发送到目的地端点的数据的数据拥塞是否发生的字段。 示例性装置还包括定时器。 该示例设备还包括反馈回路接口，其被配置为选择性地启用到源端点的反馈回路并且通过反馈回路向源端点发送拥塞通知（CN）消息。 一旦接收到指示由于从源端点到目的地端点的数据分组发生拥塞而发生拥塞的数据分组，则目的端点被配置为将定时器设置为预设时间值; 启动定时器反向计数从预设时间值到零，启用反馈回路并发送CN消息。