System and method to chain distributed applications in a network environment

    公开(公告)号:US10417025B2

    公开(公告)日:2019-09-17

    申请号:US14684363

    申请日:2015-04-11

    Abstract: A method is provided in one example embodiment and may include communicating information between a plurality of network function virtualized (NFV) based applications; and creating at least one service chain using at least two of the plurality of NFV-based applications based on the information communicated between the plurality NFV based applications. In some instances, the information can be communicated using border gateway protocol (BGP) exchanges between the NFV-based applications. In some instances, the information can include at least one of: next-hop address information for one or more ingress points of a particular NFV-based application; one or more capabilities by which a particular NFV-based application can receive data on one or more ingress points; and a method by which one or more egress points of a previous NFV-based application in a particular service chain is to perform load balancing for a subsequent NFV-based application in the particular service chain.

    SECURE SERVICE CHAINING
    102.
    发明申请

    公开(公告)号:US20180367621A1

    公开(公告)日:2018-12-20

    申请号:US15627084

    申请日:2017-06-19

    Abstract: In one embodiment, secure service chaining can be implemented efficiently for content delivery systems. An orchestrator can determine a service chain for processing a request from a client for content. The orchestrator can determine a capability identifying nodes of the service chain. The orchestrator can then transmit, to the client, a redirect message having the capability, wherein the redirect message redirects the request to a first node of the service chain. The nodes of the service chain can verify the capability and carry out the service chain. Service functions can be applied to the traffic flow associated with delivering the content to the user.

    Infrastructure-exclusive service forwarding

    公开(公告)号:US10084703B2

    公开(公告)日:2018-09-25

    申请号:US15143253

    申请日:2016-04-29

    CPC classification number: H04L45/74 H04L45/00 H04L45/7453 H04L49/3009

    Abstract: A method is provided in one example embodiment and includes receiving at a network element a packet including a Network Services Header (“NSH”), in which the NSH includes an Infrastructure (“I”) flag and a service path header comprising a Service Index (“SI”), and a Service Path ID (“SPI”) and determining whether the I flag is set to a first value. The method further includes, if the I flag is set to the first value, setting the I flag to a second value and forwarding the packet to the service function that corresponds to the SI for processing. The method still further includes, if the I flag is not set to the first value, decrementing the SI and making a forwarding decision based on a new value of the SI and the SPI.

    Method, system, and logic for in-band exchange of meta-information
    107.
    发明授权
    Method, system, and logic for in-band exchange of meta-information 有权
    用于元信息的带内交换的方法,系统和逻辑

    公开(公告)号:US09479534B2

    公开(公告)日:2016-10-25

    申请号:US14522064

    申请日:2014-10-23

    Abstract: In an embodiment, a method is provided for enabling in-band data exchange between networks. The method can comprise receiving, by a first enveloping proxy located in the first network, at least one regular secure sockets layer (SSL) record for a SSL session established between a client and a server; receiving the data from a network element located in the first network; encoding the data into at least one custom SSL record; and transmitting the at least one regular SSL record and the at least one custom SSL record to an enveloping proxy. In another embodiment, a method can comprise receiving at least one regular secure sockets layer (SSL) record and at least one custom SSL record for a SSL session established between a client and a server; extracting the data from the at least one custom SSL; transmitting the at least one regular SSL record.

    Abstract translation: 在一个实施例中,提供了一种用于实现网络之间的带内数据交换的方法。 该方法可以包括通过位于第一网络中的第一包络代理接收在客户端和服务器之间建立的SSL会话的至少一个常规安全套接字层(SSL)记录; 从位于所述第一网络中的网元接收所述数据; 将数据编码成至少一个自定义SSL记录; 以及将所述至少一个常规SSL记录和所述至少一个定制SSL记录发送到包络代理。 在另一个实施例中,一种方法可以包括:在客户端和服务器之间建立的SSL会话接收至少一个常规安全套接字层(SSL)记录和至少一个定制SSL记录; 从至少一个自定义SSL提取数据; 发送所述至少一个常规SSL记录。

    Method for implicit session routing
    108.
    发明授权
    Method for implicit session routing 有权
    隐式会话路由方法

    公开(公告)号:US09374297B2

    公开(公告)日:2016-06-21

    申请号:US14108994

    申请日:2013-12-17

    CPC classification number: H04L45/20 H04L45/04 H04L45/24 H04L45/28 H04L45/586

    Abstract: An example method is provided in one example embodiment and includes receiving a packet of a session from a previous hop router at a service zone of a service chain; recording the previous hop router for the session; determining an appliance to service the packet in the service zone using load balancing; recording an appliance identity for servicing the session in the service zone; determining a next hop router in the service chain for the packet using load balancing; and recording the next hop router for the session.

    Abstract translation: 在一个示例实施例中提供了示例性方法,并且包括从服务链的服务区的前一跳路由器接收会话的分组; 记录会话的上一跳路由器; 确定使用负载平衡来服务所述服务区中的分组的设备; 记录在服务区域中为会话服务的设备身份; 使用负载平衡确定所述分组的服务链中的下一跳路由器; 并为会话记录下一跳路由器。

Patent Agency Ranking