利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

1878 条记录 (耗时 0.046 秒)

    Leveraging standard protocols to interface unmodified applications and services
    11.
    发明授权
    Leveraging standard protocols to interface unmodified applications and services 有权

    公开(公告)号：US11853463B1

    公开(公告)日：2023-12-26

    申请号：US16293513

    申请日：2019-03-05

    申请人： Styra, Inc.

    发明人： Timothy L. Hinrichs ,  Teemu Koponen

    IPC分类号： G06F21/62 ,  H04L9/40 ,  H04L67/561

    CPC分类号： G06F21/629 ,  H04L63/0807 ,  H04L63/10 ,  H04L67/561 ,  H04L2463/082

    摘要： Some embodiments provide a method for enforcing policies for authorizing API (Application Programming Interface) calls to an application operating on a host machine. The method receives a request to authenticate a client attempting to gain access to the application, and authenticates the client based on a first set of parameters associated with the request. Using a second set of parameters associated with the request, the method evaluates a set of one or more policies associated with a set of one or more API calls to the application. Based on the evaluated policies, the method defines a third set of one or more authentication field parameters that control the API calls that the client is authorized to make to the application. The method sends an authentication reply message with the defined third set of authentication field parameters in order to control the API calls that the client is authorized to make.

    Edge node with datapath split between pods
    12.
    发明授权
    Edge node with datapath split between pods 有权

    公开(公告)号：US11838206B2

    公开(公告)日：2023-12-05

    申请号：US17384211

    申请日：2021-07-23

    申请人： VMware, Inc.

    发明人： Yong Wang ,  Cheng-Chun Tu ,  Sreeram Kumar Ravinoothala ,  Yu Ying

    IPC分类号： H04L45/58

    CPC分类号： H04L45/58

    摘要： Some embodiments of the invention provide a system for implementing multiple logical routers. The system includes a Kubernetes cluster that includes multiple nodes, with each node executing a set of pods. The set of pods include a first pod for performing a first set of data message processing operations for the multiple logical routers and at least one respective separate pod for each respective logical router of the multiple logical routers. Each respective pod is for performing a respective second set of data message processing operations for the respective logical router.

    Active and standby RICs
    13.
    发明授权
    Active and standby RICs 有权

    公开(公告)号：US11836551B2

    公开(公告)日：2023-12-05

    申请号：US17860090

    申请日：2022-07-07

    申请人： VMware, Inc.

    发明人： Giridhar Subramani Jayavelu ,  Amit Singh

    IPC分类号： G06F9/54 ,  G06F11/34 ,  G06F11/20 ,  H04L41/40 ,  H04L41/122

    CPC分类号： G06F9/546 ,  G06F11/2028 ,  G06F11/3409 ,  H04L41/122 ,  H04L41/40

    摘要： To provide a low latency near RT RIC, some embodiments separate the RIC's functions into several different components that operate on different machines (e.g., execute on VMs or Pods) operating on the same host computer or different host computers. Some embodiments also provide high speed interfaces between these machines. Some or all of these interfaces operate in non-blocking, lockless manner in order to ensure that critical near RT RIC operations (e.g., datapath processes) are not delayed due to multiple requests causing one or more components to stall. In addition, each of these RIC components also has an internal architecture that is designed to operate in a non-blocking manner so that no one process of a component can block the operation of another process of the component. All of these low latency features allow the near RT RIC to serve as a high speed IO between the E2 nodes and the xApps.

    Method and system for service switching using service tags
    16.
    发明授权
    Method and system for service switching using service tags 有权

    公开(公告)号：US11805056B2

    公开(公告)日：2023-10-31

    申请号：US17902879

    申请日：2022-09-04

    申请人： Nicira, Inc.

    发明人： Jayant Jain ,  Anirban Sengupta

    IPC分类号： H04L12/741 ,  H04L45/74 ,  H04L67/10 ,  H04L45/302 ,  H04L12/46 ,  H04L49/20

    CPC分类号： H04L45/74 ,  H04L12/4633 ,  H04L45/306 ,  H04L49/20 ,  H04L67/10 ,  H04L12/4641 ,  H04L2212/00

    摘要： The disclosure herein describes a system, which provides service switching in a datacenter environment. The system can include a service switching gateway, which can identify a service tag associated with a received packet. During operation, the service switching gateway determines a source client, a requested service, or both for the packet based on the service tag, identifies a corresponding service portal based on the service tag, and forwards the packet toward the service portal. The service switching gateway can optionally maintain a mapping between the service tag and one or more of: a source client, a required service, the service portal, and a tunnel encapsulation. The service switching gateway can encapsulate the packet based on an encapsulation mechanism supported by the service portal and forward the packet based on the mapping.

    Detecting failure of layer 2 service using broadcast messages
    17.
    发明授权
    Detecting failure of layer 2 service using broadcast messages 有权

    公开(公告)号：US11805036B2

    公开(公告)日：2023-10-31

    申请号：US17346255

    申请日：2021-06-13

    申请人： Nicira, Inc.

    发明人： Sami Boutros ,  Stephen Tan ,  Rahul Mishra ,  Kantesh Mundaragi ,  Jayant Jain ,  Akhila Naveen

    IPC分类号： H04L12/24 ,  H04L12/26 ,  H04L43/0805 ,  H04L41/0668 ,  H04L43/10

    CPC分类号： H04L43/0805 ,  H04L41/0668 ,  H04L43/10

    摘要： Some embodiments provide a method for detecting a failure of a layer 2 (L2) bump-in-the-wire service at a device. In some embodiments, the device sends heartbeat signals to a second device connected to L2 service nodes in order to detect failure of the L2 service (e.g., a failure of all the service nodes). In some embodiments, the heartbeat signals are unidirectional heartbeat signals (e.g., a unidirectional bidirectional-forwarding-detection (BFD) session) sent from each device to the other. The heartbeat signals, in some embodiments, use a broadcast MAC address in order to reach the current active L2 service node in the case of a failover (i.e., an active service node failing and a standby service node becoming the new active service node). The unidirectional heartbeat signals are also used, in some embodiments, to decrease the time between a failover and data messages being forwarded to the new active service node.

    Scaling edge services with minimal disruption
    20.
    发明授权
    Scaling edge services with minimal disruption 有权

    公开(公告)号：US11799761B2

    公开(公告)日：2023-10-24

    申请号：US17571409

    申请日：2022-01-07

    申请人： VMware, Inc.

    发明人： Yong Wang ,  Xinhua Hong ,  Hongwei Zhu

    IPC分类号： H04L45/24 ,  H04L45/02 ,  H04L12/46 ,  H04L47/2441 ,  H04L45/7453

    CPC分类号： H04L45/24 ,  H04L12/4641 ,  H04L45/02 ,  H04L45/7453 ,  H04L47/2441

    摘要： Some embodiments provide a method for forwarding data messages between edge nodes that perform stateful processing on flows between a logical network and an external network. At a particular edge node, the method receives a data message belonging to a flow. The edge nodes use a deterministic algorithm to select one of the edge nodes to perform processing for each flow. The method identifies a first edge node to perform processing for the flow in a previous configuration and a second edge node to perform processing for the flow in a new configuration according to the algorithm. When the first and second edge nodes are different, the method uses a probabilistic filter and a stateful connection tracker to determine whether the flow existed prior to a particular time. When the flow did not exist prior to that time, the method selects the second edge node for the received data message.