-
公开(公告)号：US11570283B1
公开(公告)日：2023-01-31
申请号：US16947141
申请日：2020-07-20
Applicant: Juniper Networks, Inc.
IPC: H04L69/166 , H04L69/22 , H04L45/741 , H04L9/40
Abstract: A network device may receive, from a first network, a network packet of a first network packet type that encapsulates a fragment of a second network packet of a second network packet type, where the network packet includes an extension header that indicates a source port and a destination port for the second network packet. The network device may perform an anti-spoof check on the fragment of the second network packet based at least in part on at least one of: the source port or the destination port for the second network packet that is indicated by the extension header. The network device may, based on the fragment passing the anti-spoof check, forward the fragment of the second network packet to a second network.
-
公开(公告)号：US11451585B2
公开(公告)日：2022-09-20
申请号：US16682882
申请日：2019-11-13
Applicant: Juniper Networks, Inc.
Inventor： Ashish Suresh Ghule , Jagadish Narasimha Grandhi
Abstract: A network device may receive, from a first network, one or more fragments of a first network packet of a first network packet type, where the first network packet encapsulates a second network packet of a second network packet type. The network device may buffer the one or more fragments in. The network device may, upon receiving a fragment of the first network packet that includes an indication of a source network address and a source port for the second network packet, perform an anti-spoof check of the fragment flow without assembling the first network packet. The network device may, based on the fragment flow passing the anti-spoof check, in response to receiving all fragments of the first network packet: assemble the first network packet, decapsulate the second network packet from the assembled first network packet, and forward, to a second network, the second network packet.
-
公开(公告)号：US11165701B1
公开(公告)日：2021-11-02
申请号：US16836240
申请日：2020-03-31
Applicant: Juniper Networks, Inc.
Inventor： Ashish Suresh Ghule , Jagadish Narasimha Grandhi
IPC: H04L12/749 , H04L29/06 , H04L12/851 , H04L29/12
Abstract: A network device may receive, from a first network, a network packet of a first network packet type that encapsulates a fragment of a second network packet of a second network packet type, where the network packet is part of a flow of a plurality of network packets of the first network packet type that encapsulates fragments of the second network packet, and where the network packet includes a flow label that indicates a source port for the second network packet. The network device may perform an anti-spoof check on the fragment of the second network packet based at least in part on the source port for the second network packet that is indicated by the flow label of the network packet. The network device may, based on the fragment passing the anti-spoof check, forward the fragment of the second network packet to a second network.
-
公开(公告)号：US10887231B2
公开(公告)日：2021-01-05
申请号：US15983457
申请日：2018-05-18
Applicant: Juniper Networks, Inc.
Inventor： Ashish Suresh Ghule , Pankaj Malviya , Jagadish Grandhi
IPC: H04L12/28 , H04L12/741 , H04L12/863
Abstract: A network device may forward fragments of an IPv4 network packet to an IPv6 network without reassembling the IPv4 network packet. The network device may receive and buffer one or more fragments of a fragment flow associated with the IPv4 network packet until it receives a fragment of the fragment flow that includes an indication of the destination port of the IPv4 network packet. When the network device receives the fragment that includes the indication of the destination port of the IPv4 network packet, the network device may encapsulate each fragment of the fragment flow that it has received into respective IPv6 network packets to the IPv6 network.
-
-
-
Search Results
14
records
(took 0.015 seconds)
