DATA PATH SELECTION FOR NETWORK TRANSFER USING HIGH SPEED RDMA OR NON-RDMA DATA PATHS
    1.
    发明申请
    DATA PATH SELECTION FOR NETWORK TRANSFER USING HIGH SPEED RDMA OR NON-RDMA DATA PATHS 有权
    使用高速RDMA或非RDMA数据模式进行网络传输的数据路径选择

    公开(公告)号:US20160028819A1

    公开(公告)日:2016-01-28

    申请号:US14340712

    申请日:2014-07-25

    IPC分类号: H04L29/08 H04L12/861

    摘要: A method and apparatus for high-speed data path selection for network transfer using IP addresses is disclosed. The method may include configuring an IP address for a non-RDMA data transfer or an RDMA high speed data transfer. An application executing in an emulated environment may transfer data using the same function calls for both non-RDMA data transfer or an RDMA high speed data transfer. This reduces changes to the application to allow RDMA transfers. A non-emulated interface determines whether the IP address is flagged as an RDMA address. If so, the data is transferred via an RDMA data path. If the IP address is not flagged as an RDMA address, the data is transferred via a non-RDMA data path through a traditional network stack.

    摘要翻译: 公开了一种用于使用IP地址进行网络传输的高速数据路径选择的方法和装置。 该方法可以包括配置非RDMA数据传输或RDMA高速数据传输的IP地址。 在仿真环境中执行的应用程序可以使用与RDMA数据传输或RDMA高速数据传输相同的功能调用来传输数据。 这可以减少对应用程序的更改以允许RDMA传输。 未仿真的接口确定IP地址是否被标记为RDMA地址。 如果是这样,则通过RDMA数据路径传送数据。 如果IP地址未被标记为RDMA地址,则数据通过传统的网络堆栈通过非RDMA数据路径进行传输。

    SYSTEMS AND METHODS FOR ADAPTIVE ROUTER FAILOVER IN LINUX-BASED COMPUTING SYSTEMS

    公开(公告)号:US20170099206A1

    公开(公告)日:2017-04-06

    申请号:US14874617

    申请日:2015-10-05

    IPC分类号: H04L12/26 H04L12/707

    摘要: Systems and methods for adaptive router failover in Linux-based computing systems are disclosed. Embodiments may include configuring a Linux-based computing system to have access to at least a first router and a second router. Embodiments may further include transmitting one or more data packets from the Linux-based computing system to another computing system via the first router. Embodiments may also include identifying a failure in the first router and, in response to identification of the failure in the first router, automatically switching use of the first router and second router by the Linux-based computing system. Embodiments may further include transmitting one or more data packets from the Linux-based computing system to another computing system via the second router after switching the use of the first router and second router by the Linux-based computing system.

    Mapping proprietary SSL APIs onto openssl APIs
    3.
    发明授权
    Mapping proprietary SSL APIs onto openssl APIs 有权
    将专有SSL API映射到openssl API

    公开(公告)号:US08042156B2

    公开(公告)日:2011-10-18

    申请号:US12328850

    申请日:2008-12-05

    IPC分类号: G06F17/00 G06F17/30

    摘要: Techniques are described for mapping an emulated SSL implementation to, for example, OpenSSL. An exemplary method includes receiving a request to initiate a communication session from an application, running in an emulation environment, with a first SSL API of an emulated SSL implementation running in the emulation environment, sending the request to a communication interface process that is running in a base computing environment, wherein the emulation environment is a process running on the base computing environment, extracting, with the communication interface process, communication session information from the request, calling, with the communication interface process, procedures provided by a second SSL API of an SSL implementation, in accordance with the request, to initiate a communication session with a computing device, wherein the SSL implementation is a program running in the base computing environment, initiating the communication session with the computing device, and transferring data to the computing device.

    摘要翻译: 描述了将模拟的SSL实现映射到例如OpenSSL的技术。 一种示例性方法包括:从仿真环境中运行的应用程序,在模拟环境中运行的模拟SSL实现的第一SSL API接收发起通信会话的请求,将请求发送到正在运行的通信接口进程 基本计算环境,其中所述仿真环境是在所述基础计算环境上运行的进程,通过所述通信接口处理从所述请求中提取通信会话信息,通过所述通信接口处理来调用由第二SSL API提供的过程 根据请求的SSL实现来发起与计算设备的通信会话,其中SSL实现是在基本计算环境中运行的程序,发起与计算设备的通信会话,以及将数据传送到计算设备 。

    SYSTEMS AND METHODS FOR DYNAMICALLY INSTALLING A PROGRAM'S DEPENDENT MODULES BEFORE PROGRAM EXECUTION
    5.
    发明申请
    SYSTEMS AND METHODS FOR DYNAMICALLY INSTALLING A PROGRAM'S DEPENDENT MODULES BEFORE PROGRAM EXECUTION 审中-公开
    在程序执行之前动态安装程序的依赖模块的系统和方法

    公开(公告)号:US20170046145A1

    公开(公告)日:2017-02-16

    申请号:US14825621

    申请日:2015-08-13

    IPC分类号: G06F9/445

    摘要: Systems and methods for dynamically installing a program's dependent software modules before program execution are disclosed. Embodiments may include extracting, from a file that includes at least a program to be executed on the computing system and one or more software modules on which the program depends for execution, the one or more software modules on which the program depends for execution. Embodiments may also include installing the one or more software modules on the computing system after the one or more software modules have been extracted. Embodiments may further include loading and executing the program after the one or more software modules have been installed on the computing system.

    摘要翻译: 公开了在程序执行之前动态安装程序的依赖软件模块的系统和方法。 实施例可以包括从包括至少要在计算系统上执行的程序的文件和程序依赖于其执行的一个或多个软件模块提取程序依赖于其执行的一个或多个软件模块。 实施例还可以包括在提取了一个或多个软件模块之后在计算系统上安装一个或多个软件模块。 实施例还可以包括在计算系统上安装了一个或多个软件模块之后加载和执行该程序。

    MAPPING PROPRIETARY SSL APIS ONTO OPENSSL APIS
    7.
    发明申请
    MAPPING PROPRIETARY SSL APIS ONTO OPENSSL APIS 有权
    将APIS映射到OPENSSL APIS

    公开(公告)号:US20100146588A1

    公开(公告)日:2010-06-10

    申请号:US12328850

    申请日:2008-12-05

    IPC分类号: G06F21/20 G06F9/06

    摘要: Techniques are described for mapping an emulated SSL implementation to, for example, OpenSSL. An exemplary method includes receiving a request to initiate a communication session from an application, running in an emulation environment, with a first SSL API of an emulated SSL implementation running in the emulation environment, sending the request to a communication interface process that is running in a base computing environment, wherein the emulation environment is a process running on the base computing environment, extracting, with the communication interface process, communication session information from the request, calling, with the communication interface process, procedures provided by a second SSL API of an SSL implementation, in accordance with the request, to initiate a communication session with a computing device, wherein the SSL implementation is a program running in the base computing environment, initiating the communication session with the computing device, and transferring data to the computing device.

    摘要翻译: 描述了将模拟的SSL实现映射到例如OpenSSL的技术。 一种示例性方法包括:从仿真环境中运行的应用程序,在模拟环境中运行的模拟SSL实现的第一SSL API接收发起通信会话的请求,将请求发送到正在运行的通信接口进程 基本计算环境,其中所述仿真环境是在所述基础计算环境上运行的进程,通过所述通信接口处理从所述请求中提取通信会话信息,通过所述通信接口处理来调用由第二SSL API提供的过程 根据请求的SSL实现来发起与计算设备的通信会话,其中SSL实现是在基本计算环境中运行的程序,发起与计算设备的通信会话,以及将数据传送到计算设备 。

    Insecure connection prohibition
    8.
    发明授权
    Insecure connection prohibition 有权
    不安全连接禁止

    公开(公告)号:US09380047B2

    公开(公告)日:2016-06-28

    申请号:US13921297

    申请日:2013-06-19

    IPC分类号: H04L29/06 H04L29/08

    摘要: A server system may be configured to receive a request for a connection from a client application. The server system may also be configured to determine if the client application is permitted to connect with the server. The connection with the client application may be prohibited if the server determines that the client application is not permitted to connect with the server. A secure connection with the client application may be permitted if the server determines that the client application is permitted to connect with the server. The secure connection may be established with the security protocol settings specified by a process on the server or shared security protocol settings specified by on a server system-wide basis.

    摘要翻译: 服务器系统可以被配置为从客户端应用接收对连接的请求。 服务器系统还可以被配置为确定客户端应用是否被允许与服务器连接。 如果服务器确定不允许客户端应用程序与服务器连接,则可能会禁止与客户端应用程序的连接。 如果服务器确定允许客户端应用程序与服务器连接,则可能允许与客户端应用程序的安全连接。 可以使用由服务器上的进程指定的安全协议设置或在服务器系统范围内指定的共享安全协议设置来建立安全连接。

    REQUESTING AND STORING CERTIFICATES FOR SECURE CONNECTION VALIDATION
    9.
    发明申请
    REQUESTING AND STORING CERTIFICATES FOR SECURE CONNECTION VALIDATION 审中-公开
    要求和存储证书以进行安全连接验证

    公开(公告)号:US20140325232A1

    公开(公告)日:2014-10-30

    申请号:US13873472

    申请日:2013-04-30

    IPC分类号: H04L29/06

    CPC分类号: H04L63/0823

    摘要: A client system may be configured to request a certificate from a server system and store the certificate locally. The stored certificate may be used to later authenticate a secure connection between the client system and the server system. The secure connection validated by the stored certificate may be, for example, a secure sockets layer/transport layer security (SSL/TLS) connection.

    摘要翻译: 客户端系统可以被配置为从服务器系统请求证书并在本地存储证书。 存储的证书可以用于稍后验证客户端系统和服务器系统之间的安全连接。 由存储的证书验证的安全连接可以是例如安全套接层/传输层安全(SSL / TLS)连接。

    Dynamic updating of trusted certificates and certificate revocation lists in a computing system
    10.
    发明授权
    Dynamic updating of trusted certificates and certificate revocation lists in a computing system 有权
    在计算系统中动态更新可信证书和证书撤销列表

    公开(公告)号:US08032742B2

    公开(公告)日:2011-10-04

    申请号:US12328934

    申请日:2008-12-05

    IPC分类号: H04L29/06

    摘要: This application generally describes techniques for dynamically updating trusted certificates and CRLs, generally referred to herein as certificate information. That is, techniques are described for updating trusted certificates and CRLs without terminating existing communication sessions. An exemplary method includes the steps of receiving an initial configuration that includes a trusted certificate authority, receiving certificate information that includes a certificate revocation list (CRL) and a first certificate from the trusted certificate authority, storing the certificate information in the configuration, initiating a communication session for an application, receiving an update to the certificate information, and updating the configuration to reflect the update to the certificate information without terminating the communication session. A computing device may receive the update to the certificate information from a user, as well as receiving a command from the user to apply the update to the certificate information to current communication sessions.

    摘要翻译: 该应用程序通常描述用于动态更新可信证书和CRL的技术,这里通常称为证书信息。 也就是说,描述了用于更新可信证书和CRL而不终止现有通信会话的技术。 一种示例性方法包括以下步骤:接收包括受信任证书颁发机构的初始配置,从可信证书颁发机构接收包括证书撤销列表(CRL)和第一证书的证书信息,将证书信息存储在配置中,发起 通信会话,接收到证书信息的更新,以及更新配置以将更新反映到证书信息而不终止通信会话。 计算设备可以从用户接收对证书信息的更新,以及从用户接收到将该更新应用于当前通信会话的证书信息的命令。