公开(公告)号：US11863528B1

公开(公告)日：2024-01-02

申请号：US16002966

申请日：2018-06-07

Applicant: Amazon Technologies, Inc.

Inventor： Peter Chung

IPC: G06F15/16 ,  H04L9/40 ,  H04L61/2521 ,  H04L69/22 ,  H04L67/1036 ,  H04L61/4511

CPC classification number: H04L63/0263 ,  H04L61/2528 ,  H04L61/4511 ,  H04L63/0236 ,  H04L63/0281 ,  H04L63/101 ,  H04L67/1036 ,  H04L69/22

Abstract: A system and method for generating a set of destination IP address to be added into a firewall whitelist. The system receives a network packet transmitted through a firewall and determines whether the destination address of the network packet corresponds to at least one of computing resource of a plurality of computing resources. If so, the system transforms the destination address of the packet to another destination address of the corresponding computing resource. The system forwards the network packet to the destination address of the corresponding computing resource.

公开(公告)号：US11811639B2

公开(公告)日：2023-11-07

申请号：US18061218

申请日：2022-12-02

Applicant: Snowflake Inc.

Inventor： Jonathan C. Allie ,  Seth Hettich ,  Aaron S. Joyner

IPC: H04L43/50 ,  H04L67/02 ,  H04L67/133 ,  H04L43/0817 ,  H04L61/4541 ,  H04L61/4511 ,  H04L67/1036 ,  H04L43/0805

CPC classification number: H04L43/50 ,  H04L43/0805 ,  H04L43/0817 ,  H04L61/4511 ,  H04L61/4541 ,  H04L67/02 ,  H04L67/1036 ,  H04L67/133

Abstract: A system may include a processing device and a memory storing instructions that, when executed by the processing device, causes the processing device to discover one or more endpoints of a service in view of a name that is unique to the service. In response to receiving a request to resolve the name from a client, the processing device may obtain the one or more endpoints of that service in view of the name. The processing device may filter the one or more endpoints, in view of the name and return the one or more endpoints which are filtered, to the client.

公开(公告)号：US11698818B2

公开(公告)日：2023-07-11

申请号：US16611682

申请日：2018-05-03

Applicant: British Telecommunications Public Limited Company

Inventor： Robert Ghanea-Hercock

IPC: G06F9/50 ,  G06N20/00 ,  H04L67/1036 ,  G06F9/455 ,  G06F9/38 ,  G06F9/48 ,  G06F9/54 ,  G06F18/23 ,  G06F18/241

CPC classification number: G06F9/505 ,  G06F9/3836 ,  G06F9/45558 ,  G06F9/48 ,  G06F9/5005 ,  G06F9/5083 ,  G06F9/546 ,  G06F18/23 ,  G06F18/241 ,  G06N20/00 ,  G06F2009/4557 ,  H04L67/1036

Abstract: A computer implemented method of executing a plurality of discrete software modules each including a machine learning algorithm as an executable software component configurable to approximate a function relating a domain data set to a range data set; a data store; and a message handler as an executable software component arranged to receive input data and communicate output data for the module, wherein the message handler is adapted to determine domain parameters for the algorithm based on the input data and to generate the output data based on a result generated by the algorithm, each module having associated a metric of resource utilization by the module, the method including receiving a request for a machine learning task; and selecting a module from the plurality of modules for the task based on the metric associated with the module.

公开(公告)号：US20230171171A1

公开(公告)日：2023-06-01

申请号：US18102696

申请日：2023-01-28

Applicant: VMware, Inc.

Inventor： Murali Basavaiah ,  Anand Parthasarathy ,  Sreeram Iyer ,  Sambit Kumar Das ,  Narasimhan Gomatam Mandeyam

IPC: H04L43/065 ,  H04L43/10 ,  H04L67/1036 ,  H04L43/0805 ,  H04L47/783 ,  H04L47/70 ,  H04L67/1031 ,  H04L61/4511

CPC classification number: H04L43/065 ,  H04L43/10 ,  H04L67/1036 ,  H04L43/0805 ,  H04L47/783 ,  H04L47/828 ,  H04L67/1031 ,  H04L61/4511

Abstract: Some embodiments provide a novel method of performing health monitoring for resources associated with a global server load balancing (GSLB) system. This system is implemented by several domain name system (DNS) servers that perform DNS services for resources located at several geographically separate sites. The method identifies several different groupings of the resources. It then assigns the health monitoring of the different resource groups to different DNS servers. The method then configures each particular DNS server (1) to send health monitoring messages to the particular group of resources assigned to the particular DNS server, (2) to generate data by analyzing responses to the sent health monitoring messages, and (3) to distribute the generated data to the other DNS servers. The method in some embodiments is performed by a set of one or more controllers.

公开(公告)号：US20180278542A1

公开(公告)日：2018-09-27

申请号：US15468097

申请日：2017-03-23

Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC

Inventor： Bradley J. Barrows ,  YanWen Qiao ,  Kevin Chan ,  Stephane Cavin

IPC: H04L12/911 ,  H04L29/08

CPC classification number: H04L67/1036

Abstract: Variety of approaches to provide an autonomous governor in a distributed system for preserving a shared resource are described. A hosted service initiates operations to provide the autonomous governor upon determining the shared resource to be managed. An initial lease count is designated to the shared resource. The initial lease count corresponds to an estimated capacity of the shared resource. Next, an assigned lease count is determined by incrementing or decrementing the initial lease count based on a detected actual capacity of the shared resource. Upon detecting a steady state of the assigned lease count, the assigned lease count is incremented to determine whether the actual capacity of the shared resource is increased.

公开(公告)号：US20180234344A1

公开(公告)日：2018-08-16

申请号：US15954616

申请日：2018-04-17

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Liang CHEN ,  Peng ZHANG ,  Dongchen ZHOU

IPC: H04L12/803 ,  H04L12/801

CPC classification number: H04L47/125 ,  H04L12/2856 ,  H04L12/4625 ,  H04L29/08 ,  H04L47/11 ,  H04L67/1008 ,  H04L67/1029 ,  H04L67/1036

Abstract: Embodiments of the present application disclose a load sharing method, apparatus, and system. The method includes: obtaining, by a controller, a load parameter of a target network device; determining, by the controller according to the load parameter, whether the target network device is in an overloaded state; and sending, by the controller, first configuration information to the target network device when the target network device is in the overloaded state, where the target network device is configured to be in a first state according to the first configuration information, and the first state instructs the target network device to delay or skip returning a PADO packet when receiving a PADI packet. According to the embodiments of the present application, not only load of network devices in a network is more balanced, but also a difficulty in implementing network load balance is small and costs are low.

公开(公告)号：US20180152510A1

公开(公告)日：2018-05-31

申请号：US15364036

申请日：2016-11-29

Applicant: Level 3 Communications, LLC

Inventor： Christopher Newton ,  Laurence R. Lipstone ,  Hong Zhu

IPC: H04L29/08 ,  H04L29/12

CPC classification number: H04L67/1036 ,  H04L61/1511 ,  H04L61/1535 ,  H04L67/02 ,  H04L67/1008 ,  H04L67/1014 ,  H04L67/1021 ,  H04L67/141

Abstract: A computer-implemented method, operable on a device in a content delivery network (CDN), wherein the CDN delivers content on behalf of at least one content provider, the device implementing a content delivery (CD) service, the method includes receiving a request from a client for particular content; determining a second device in said CDN, said first device being in a first cluster and said second device being in a second cluster distinct from said first cluster; migrating said request to said second device; and then providing said second device with network traffic from said client.

公开(公告)号：US09960967B2

公开(公告)日：2018-05-01

申请号：US12603471

申请日：2009-10-21

Applicant: Lee Chen ,  John Chiong

Inventor： Lee Chen ,  John Chiong

IPC: H04L12/24 ,  H04L29/12 ,  H04L29/08

CPC classification number: H04L41/12 ,  H04L29/12066 ,  H04L61/1511 ,  H04L67/1002 ,  H04L67/1021 ,  H04L67/1036

Abstract: A method and system to determine a web server based on geo-location information is disclosed. The system includes: a local DNS server coupled to a web client; a plurality of web servers; and a global load balancer coupled to the local DNS server. The global load balancer: receives a request for a web service sent by the web client, the request comprising local DNS server information; determines a geographic location for the local DNS server based on the local DNS server information; determines a web server from the plurality of web servers based on the requested web service; determines a geographic location for the determined web server; determines that the geographic location for the local DNS server matches the geographic location for the determined web server; selects the determined web server; and sends a response comprising information on the selected web server to the local DNS server.

公开(公告)号：US20180113807A1

公开(公告)日：2018-04-26

申请号：US15841656

申请日：2017-12-14

Applicant: Zscaler, Inc.

Inventor： Patrick Foxhoven ,  John Chanak ,  William Fehring

IPC: G06F12/0815 ,  G06F12/0837 ,  G06F12/0842

CPC classification number: G06F12/0815 ,  G06F12/0837 ,  G06F12/0842 ,  H04L29/08288 ,  H04L61/1511 ,  H04L61/1552 ,  H04L63/0227 ,  H04L63/20 ,  H04L67/1036 ,  Y02B70/123

Abstract: A Dynamic Name Server (DNS) surrogation method, a DNS system, and a DNS server provide DNS surrogation which is the idea that if a user device sends a DNS resolution request to a given DNS server that server does not need to actually perform the recursion itself. A policy can be defined telling the server that first received the request to take other factors into account and “relay” or “surrogate” that request to another node. This additional node is called a “surrogate” and it actually performs the recursion therefore allowing the resolving party to perform proper localization, optimization, or any other form of differentiated resolution. This surrogation also distributes the job of actually performing resolution, which adds scalability to the DNS server or service itself. A network of “surrogate” resolvers is possible as well as the concept of every client needing DNS resolution can also become a surrogate.

公开(公告)号：US20180083921A1

公开(公告)日：2018-03-22

申请号：US15825924

申请日：2017-11-29

Applicant: Konvax Corporation

Inventor： Maurizio Talamo ,  Franco Arcieri ,  Christian H. Schunck ,  Armanas Povilionis

IPC: H04L29/06 ,  G06F17/30

CPC classification number: H04L63/0245 ,  G06F16/7343 ,  G06F16/90344 ,  H04L63/0263 ,  H04L67/1036

Abstract: Fast string search and matching is critical for many security tasks in particular if these have “gate functionality” for instance as found in access control applications, firewalls, routers, and load balancers. The fast matching of strings is essential to impose and enforce access control policies without creating bottlenecks. Firewalls protect networks by monitoring the traffic crossing the network perimeter. The number of packet matching rules firewalls can effectively handle is limited by the matching time and space complexity of the algorithms employed. A new approach implements matching independent of the number of rules and linear in the length of the rule to be matched. A data structure used in this approach is referred to as a “Bipartite Concatenated Representation” (BCR). The space complexity of the BCR within this application scenario scales as O(N log2 N) where N is the number of rules.