公开(公告)号：US07050393B2

公开(公告)日：2006-05-23

申请号：US09852826

申请日：2001-05-10

申请人： Deanna Lynn Quigg Brown ,  Vinit Jain ,  Venkat Venkatsubra

发明人： Deanna Lynn Quigg Brown ,  Vinit Jain ,  Venkat Venkatsubra

IPC分类号： H04L12/28 ,  H04J1/16 ,  G08C15/00 ,  G06F11/00

CPC分类号： H04L47/10 ,  H04L47/26

摘要： A method, system, and product are described for alleviating router congestion when the router is processing packets transmitted by computer systems having a congestion notification capability. The router marks packets transmitted between a first computer system and a second computer system when the first and second computer systems have the congestion notification capability. The marking indicates that the router is moderately congested. A marked packet is then received by the first computer system. The router then drops packets transmitted by the first computer system when the packets were transmitted subsequently to the receipt of the marked packet.

摘要翻译： 描述了一种方法，系统和产品，用于在路由器处理具有拥塞通知能力的计算机系统发送的分组时减轻路由器拥塞。 当第一和第二计算机系统具有拥塞通知能力时，路由器标记在第一计算机系统和第二计算机系统之间传输的分组。 标记表示路由器中等拥塞。 然后，标记的分组被第一计算机系统接收。 然后路由器丢弃第一计算机系统发送的数据包，随后在接收到标记的数据包之后发送数据包。

公开(公告)号：US20060107324A1

公开(公告)日：2006-05-18

申请号：US10992514

申请日：2004-11-18

申请人： Radhika Chirra ,  Ranadip Das ,  Vinit Jain ,  Venkat Venkatsubra

发明人： Radhika Chirra ,  Ranadip Das ,  Vinit Jain ,  Venkat Venkatsubra

IPC分类号： G06F12/14

CPC分类号： H04L63/1458 ,  H04L69/16 ,  H04L69/163 ,  H04L2463/141

摘要： An improved method, apparatus, and computer instructions for preventing denial of service attacks on persistent connections. A synchronize packet is received. In response to receiving the synchronize packet, a state of the persistent connection is identified. An action on the synchronize packet is deferred until a subsequent communication with a peer to the persistent connection.

摘要翻译： 用于防止对持久连接的拒绝服务攻击的改进的方法，装置和计算机指令。 接收到同步数据包。 响应于接收到同步分组，识别持续连接的状态。 对同步数据包的操作被延迟到与对等体的后续通信到持久连接。

公开(公告)号：US20060031409A1

公开(公告)日：2006-02-09

申请号：US10912498

申请日：2004-08-05

申请人： Vinit Jain ,  Kavitha Baratakke ,  Jeffrey Messing ,  Venkat Venkatsubra

发明人： Vinit Jain ,  Kavitha Baratakke ,  Jeffrey Messing ,  Venkat Venkatsubra

IPC分类号： G06F15/16

CPC分类号： H04L67/2842 ,  H04L49/90 ,  H04L49/9036 ,  H04L69/16 ,  H04L69/161 ,  H04L69/32

摘要： A method, system, and computer program product in a computer-readable medium for delivering data, received from a network, to a storage buffer assigned to an application is proposed. An application designates a communication buffer within a local data processing system for buffering data communicated with an application. The local data processing system reports to a network interface of the local data processing system a memory address of the designated communication buffer, and the data processing system creates a cookie containing the memory address. The data processing system then sends the cookie form the local data processing system to a remote data processing system, such that the remote data processing system may address data directly to the designated communication buffer.

公开(公告)号：US20050091307A1

公开(公告)日：2005-04-28

申请号：US10692124

申请日：2003-10-23

申请人： Venkat Venkatsubra ,  Vinit Jain

发明人： Venkat Venkatsubra ,  Vinit Jain

IPC分类号： H04L29/06 ,  G06F15/16

CPC分类号： H04L65/4092 ,  H04L29/06027 ,  H04L65/608

摘要： A graphic user interface of a network client (106) includes a stock ticker from a stock server (110) and a news sidebar from a news server (112) over the IP addresses advertised to the client (106) in its list of mutli-homed addresses from the video server (104) specified under Stream Control Transmission Protocol (SCTP). The client accepts real-time data from the stock exchange server and the news agency server on the multi-homed IP addresses designated in the association with the video server (104) without knowing that the data is coming from a different source than the video server (104). The real-time data feeds from the video, stock and news servers are aggregated on the client (106) with enhanced speed because the feeds come directly to the client and not via the video server. The operating systems of the home server and remote servers utilize SCTP and specialized commands to implement the enhanced speed of real-time data aggregation being streamed to network clients without requiring modifications to existing client systems.

摘要翻译： 网络客户端（106）的图形用户界面包括来自股票服务器（110）的股票行情和来自新闻服务器（112）的新闻侧栏，通过在其列表中通告给客户端（106）的IP地址， 来自在流控制传输协议（SCTP）下指定的视频服务器（104）的归属地址。 客户端接收来自证券交易所服务器和通讯社服务器的与视频服务器（104）相关联指定的多归属IP地址的实时数据，而不知道数据来自与视频服务器不同的源 （104）。 来自视频，股票和新闻服务器的实时数据馈送以高速度聚合在客户端（106）上，因为馈送直接进入客户端而不是经由视频服务器。 家庭服务器和远程服务器的操作系统使用SCTP和专用命令来实现流式传输到网络客户端的实时数据聚合的增强速度，而不需要修改现有的客户端系统。

公开(公告)号：US20050086359A1

公开(公告)日：2005-04-21

申请号：US10687236

申请日：2003-10-16

申请人： Dwip Banerjee ,  Kavitha Baratakke ,  Vinit Jain ,  Venkat Venkatsubra

发明人： Dwip Banerjee ,  Kavitha Baratakke ,  Vinit Jain ,  Venkat Venkatsubra

IPC分类号： G06F9/46 ,  G06F9/50 ,  G06F15/16

CPC分类号： G06F9/5027 ,  G06F9/544 ,  G06F2209/5018 ,  G06F2209/508

摘要： A method, system, and program for monitoring thread usage to dynamically control a thread pool are provided. An application running on the server system invokes a listener thread on a listener socket for receiving client requests at the server system and passing the client requests to one of multiple threads waiting in a thread pool. Additionally, the application sends an ioctl call in blocking mode on the listener thread. A TCP layer within the server system detects the listener thread in blocking mode and monitors a thread count of at least one of a number of incoming requests waiting to be processed and a number of said plurality of threads remaining idle in the thread pool over a sample period. Once the TCP layer detects a thread usage event, the ioctl call is returned indicating the thread usage event with the thread count, such that a number of threads in the thread pool may be dynamically adjusted to handle the thread count.

摘要翻译： 提供了一种用于监视线程使用以动态控制线程池的方法，系统和程序。 在服务器系统上运行的应用程序调用侦听器套接字上的侦听器线程，以便在服务器系统上接收客户端请求，并将客户端请求传递给等待线程池的多个线程之一。 此外，应用程序在侦听器线程上以阻塞模式发送ioctl调用。 服务器系统内的TCP层以阻塞模式检测侦听器线程，并且监视等待被处理的多个传入请求中的至少一个的线程计数，并且线程池中的多个线程在一个样本上保持空闲 期。 一旦TCP层检测到线程使用事件，将返回指示线程计数的线程使用事件的ioctl调用，以使线程池中的线程数可以被动态调整以处理线程计数。

公开(公告)号：US09092274B2

公开(公告)日：2015-07-28

申请号：US13313534

申请日：2011-12-07

申请人： Omar Cardona ,  Vinit Jain ,  Renato J. Recio ,  Rakesh Sharma

发明人： Omar Cardona ,  Vinit Jain ,  Renato J. Recio ,  Rakesh Sharma

IPC分类号： G06F15/16 ,  G06F9/54 ,  G06F9/455

CPC分类号： G06F9/54 ,  G06F9/45558 ,  G06F2009/45595

摘要： An approach is provided in which a hardware accelerated bridge executing on a network adapter receives an ingress data packet. The data packet includes a destination MAC address that corresponds to a virtual machine, which interfaces to a software bridge executing on a hypervisor. The hardware accelerated bridge identifies a software bridge table entry that includes the destination MAC address and a virtual function identifier, which identifies a virtual function corresponding to the software bridge. In turn, the hardware accelerated bridge sends the data packet from the hardware accelerated bridge to the software bridge through the identified virtual function.

摘要翻译： 提供了一种方法，其中在网络适配器上执行的硬件加速桥接收入入数据分组。 数据包包括与虚拟机相对应的目的地MAC地址，该目的MAC地址与在管理程序上执行的软件桥接口相连接。 硬件加速桥标识一个包含目标MAC地址和虚拟功能标识符的软件桥表项，它标识与软件桥相对应的虚拟功能。 反过来，硬件加速网桥通过识别的虚拟功能将数据包从硬件加速桥发送到软件桥。

公开(公告)号：US08954704B2

公开(公告)日：2015-02-10

申请号：US13209253

申请日：2011-08-12

申请人： Omar Cardona ,  Vinit Jain ,  Jayakrishna Kidambi ,  Renato J. Recio

发明人： Omar Cardona ,  Vinit Jain ,  Jayakrishna Kidambi ,  Renato J. Recio

IPC分类号： G06F12/00 ,  G06F12/02

CPC分类号： G06F12/0284 ,  Y02D10/13

摘要： An approach is provided which a system selects a first virtual function from a plurality of virtual functions executing on a network adapter that includes a memory area. Next, the system allocates, in the memory area, a memory corresponding to the first virtual function. The system then stores one or more translation entries in the allocated memory partition, which are utilized to send data traversing through the first virtual function. As such, the system sends, utilizing one or more of the translation entries, the data packets from the network adapter to one or more destinations. In turn, the system dynamically resizes the memory partition based upon an amount of the memory partition that is utilized to store the one or more translation entries.

摘要翻译： 提供了一种方法，系统从包括存储区域的网络适配器上执行的多个虚拟功能中选择第一虚拟功能。 接下来，系统在存储器区域中分配与第一虚拟功能相对应的存储器。 然后，系统将一个或多个转换条目存储在所分配的存储器分区中，用于发送穿过第一虚拟功能的数据。 因此，系统利用一个或多个转换条目将来自网络适配器的数据分组发送到一个或多个目的地。 反过来，系统基于用于存储一个或多个翻译条目的存储器分区的量来动态地调整存储器分区的大小。

公开(公告)号：US08819211B2

公开(公告)日：2014-08-26

申请号：US13556769

申请日：2012-07-24

申请人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

发明人： Katherine Barabash ,  Rami Cohen ,  Vinit Jain ,  Renato J. Recio ,  Benny Rochwerger

IPC分类号： G06F15/173

CPC分类号： H04L41/0893 ,  H04L63/20

摘要： According to one embodiment of the present disclosure, an approach is provided in which a policy server receives a request for a policy from a requestor. The policy server identifies an initiating virtual machine; the initial virtual machine's corresponding virtual network; and a destination virtual machine. Next, a policy corresponding to sending data from the first virtual machine to the second virtual machine is selected. The policy includes one or more logical references to the virtual network and does not include a physical reference to a physical entity located on a physical network. In turn, a physical path translation corresponding to the selected policy is identified and sent to the requestor.

摘要翻译： 根据本公开的一个实施例，提供了一种方法，其中策略服务器从请求者接收对策略的请求。 策略服务器识别启动虚拟机; 初始虚拟机的对应虚拟网络; 和目标虚拟机。 接下来，选择对应于从第一虚拟机向第二虚拟机发送数据的策略。 策略包括对虚拟网络的一个或多个逻辑引用，并且不包括对位于物理网络上的物理实体的物理引用。 反过来，识别对应于所选策略的物理路径转换并将其发送到请求者。

公开(公告)号：US20130152075A1

公开(公告)日：2013-06-13

申请号：US13313534

申请日：2011-12-07

申请人： Omar Cardona ,  Vinit Jain ,  Renato J. Recio ,  Rakesh Sharma

发明人： Omar Cardona ,  Vinit Jain ,  Renato J. Recio ,  Rakesh Sharma

IPC分类号： G06F9/455

CPC分类号： G06F9/54 ,  G06F9/45558 ,  G06F2009/45595

摘要： An approach is provided in which a hardware accelerated bridge executing on a network adapter receives an ingress data packet. The data packet includes a destination MAC address that corresponds to a virtual machine, which interfaces to a software bridge executing on a hypervisor. The hardware accelerated bridge identifies a software bridge table entry that includes the destination MAC address and a virtual function identifier, which identifies a virtual function corresponding to the software bridge. In turn, the hardware accelerated bridge sends the data packet from the hardware accelerated bridge to the software bridge through the identified virtual function.

摘要翻译： 提供了一种方法，其中在网络适配器上执行的硬件加速桥接收入入数据分组。 数据包包括与虚拟机相对应的目的地MAC地址，该目的MAC地址与在管理程序上执行的软件桥接口相连接。 硬件加速桥标识一个包含目标MAC地址和虚拟功能标识符的软件桥表项，它标识与软件桥相对应的虚拟功能。 反过来，硬件加速网桥通过识别的虚拟功能将数据包从硬件加速桥发送到软件桥。

公开(公告)号：US08448189B2

公开(公告)日：2013-05-21

申请号：US12819502

申请日：2010-06-21

申请人： Dolapo Martin Falola ,  Vinit Jain ,  Shannon Marie MacAlpine ,  Shawn Patrick Mullen ,  James Stanley Tesauro

发明人： Dolapo Martin Falola ,  Vinit Jain ,  Shannon Marie MacAlpine ,  Shawn Patrick Mullen ,  James Stanley Tesauro

IPC分类号： G06F9/44 ,  G06F11/30 ,  G06F11/00 ,  G06F17/30

CPC分类号： H04L63/1416 ,  H04L2463/146

摘要： A method, apparatus and computer instructions for handling intrusions. A tracer packet is sent back to an intruder causing the intrusion in response to receiving notification of an intrusion from a particular node in a network data processing system. Nodes in the network data processing system are notified of the tracer packet. Identification of the node is stored for use in tracing a route of the tracer packet through the data processing system in response to receiving a message from a node indicating receipt of the tracer packet.

摘要翻译： 一种用于处理入侵的方法，装置和计算机指令。 响应于接收到来自网络数据处理系统中的特定节点的入侵的通知，跟踪器分组被发送回入侵者，导致入侵。 网络数据处理系统中的节点通知跟踪分组。 响应于从指示接收到示踪器分组的节点接收到消息，节点的标识被存储用于通过数据处理系统跟踪跟踪分组的路由。