-
公开(公告)号:US10594618B1
公开(公告)日:2020-03-17
申请号:US15615016
申请日:2017-06-06
Applicant: Juniper Networks, Inc.
Inventor: Prashant Singh , Sreekanth Rupavatharam , Hariprasad Shanmugam , Erin C. MacNeil
IPC: H04L12/805 , H04L12/861 , H04L12/935 , H04L29/06 , H04L12/879 , H04L12/841
Abstract: The disclosed apparatus may include (1) a physical routing engine that comprises (A) a socket-intercept layer, stored in kernel space, that (I) intercepts a packet that is destined for a remote device and (II) queries, in response to intercepting the packet in kernel space, a routing daemon in user space for an MTU value of an egress interface that is to forward the packet from the network device to the remote device and (B) a tunnel driver, stored in kernel space, that fragments the packet into segments whose respective sizes each comply with the MTU value of the egress interface and (2) a physical packet forwarding engine that forwards the segments of the packet to the remote device by way of the egress interface. Various other apparatuses, systems, and methods are also disclosed.
-
公开(公告)号:US10127091B1
公开(公告)日:2018-11-13
申请号:US15388018
申请日:2016-12-22
Applicant: Juniper Networks, Inc.
Inventor: Erin C. MacNeil , Hariprasad Shanmugam , Sreekanth Rupavatharam
IPC: G06F9/54
Abstract: A device may receive, by a kernel of the device and from a loadable kernel module of the device, information that instructs the kernel to invoke a callback function associated with the loadable kernel module based on an execution of a hook of the kernel. The device may receive, by the kernel of the device and from an application of the device, a socket application programming interface (API) call. The socket API call may include control information. The device may execute, by the kernel of the device, the hook based on receiving the socket API call. The device may invoke, by the kernel of the device, the callback function associated with the loadable kernel module based on executing the hook to permit a functionality associated with the callback function to be provided. The kernel may provide the control information, associated with the socket API call, to the callback function as an argument.
-
公开(公告)号:US11902404B1
公开(公告)日:2024-02-13
申请号:US17837406
申请日:2022-06-10
Applicant: Juniper Networks, Inc.
Inventor: Amit Arora , Erin C. MacNeil , Harmeet Singh , Sairam Neelam
IPC: H04L47/62 , H04L45/74 , H04W28/10 , H04W28/02 , H04L69/163 , H04L69/22 , H04L47/193 , H04L47/28 , H04L43/04
CPC classification number: H04L69/163 , H04L43/04 , H04L47/193 , H04L47/28 , H04L69/22
Abstract: A network device may monitor a TCP session with another network device, and may identify ingress and/or egress packets, a TCP header, and a socket of the TCP session. The network device may inspect the ingress and/or egress packets, the TCP header, and the socket to identify a zero window advertisement, details of a last quantity of packets sent or received, synchronize, finish, or reset packets sent or received, negotiated TCP options, or buffer space utilization, and may temporarily record identified data based on the inspection. The network device may detect a TCP session flap when a finish packet or a reset packet is identified and recorded, and may store, in a dead TCP session list, the identified data based on the TCP session flap being detected.
-
14.
公开(公告)号:US11327685B1
公开(公告)日:2022-05-10
申请号:US16907544
申请日:2020-06-22
Applicant: Juniper Networks, Inc.
Inventor: Erin C. MacNeil , Amit Kumar Rao , Finlay Michael Graham Pelley
IPC: G06F3/06
Abstract: A disclosed method may include (1) publishing, by a writer, a first context that represents a lockless data structure at a first moment in time for access by a set of readers, (2) upon the publication of the first context, directing at least one of the readers to access an object stored in shared memory via the first context, (3) publishing, by the writer, a second context that represents the lockless data structure at a second moment in time for access by the set of readers, and (4) upon the publication of the second context, directing the at least one of the readers to access an additional object stored in the shared memory via the second context. Various other apparatuses, systems, and methods are also disclosed.
-
公开(公告)号:US11307981B1
公开(公告)日:2022-04-19
申请号:US16870977
申请日:2020-05-10
Applicant: Juniper Networks, Inc.
Inventor: Erin C. MacNeil , Amit Kumar Rao , Finlay Michael Graham Pelley
IPC: G06F12/02 , G06F12/1045 , G06F9/54 , G06F13/16 , G06F12/1036
Abstract: A disclosed method may include (1) mapping a block of shared memory to a plurality of processes running on a computing device, (2) determining, for a process within the plurality of processes, a local pointer that references a specific portion of the block of shared memory from a shared memory pointer that is shared across the plurality of processes by (A) identifying, within the shared memory pointer, a block number assigned to the block of shared memory and (B) identifying, within the shared memory pointer, an offset that corresponds to the specific portion of the block of shared memory relative to the process, and then (3) performing an operation on the specific portion of the block of shared memory based at least in part on the local pointer. Various other systems, methods, and computer-readable media are also disclosed.
-
公开(公告)号:US10362070B1
公开(公告)日:2019-07-23
申请号:US15241834
申请日:2016-08-19
Applicant: Juniper Networks, Inc.
Inventor: Sreekanth Rupavatharam , Hariprasad Shanmugam , Erin C. MacNeil
Abstract: The disclosed method may include (1) receiving a synchronize message from a computing device to initiate synchronization between the computing device and a server with respect to a communication protocol, (2) notifying an application in user space on the server of the synchronize message such that the application in user space selects at least one attribute to be applied to a communication session resulting from the synchronization between the computing device and the server, (3) sending a synchronize acknowledgment that identifies the attribute selected by the application in user space to the computing device to further the synchronization between the computing device and the server, and then (4) establishing the communication session with the attribute selected by the application in user space upon receiving an acknowledgment message from the computing device to complete the synchronization. Various other methods, systems, and apparatuses are also disclosed.
-
公开(公告)号:US10348652B2
公开(公告)日:2019-07-09
申请号:US15418717
申请日:2017-01-28
Applicant: Juniper Networks, Inc.
Inventor: Erin C. MacNeil , Sreekanth Rupavatharam , Hariprasad Shanmugam
IPC: G06F3/06 , G06F9/54 , H04L12/879 , H04L12/46 , H04L29/06 , H04L12/935
Abstract: The disclosed computer-implemented method may include (1) identifying, in kernel space on a network device, a packet that is destined for a remote device, (2) passing, along with the packet, metadata for the packet to a packet buffer in kernel space on the network device, (3) framing, by the kernel module in kernel space, the packet such that the packet egresses via a tunnel interface driver on the network device, (4) encapsulating, by the tunnel interface driver, the packet with the metadata, and then (5) forwarding, by the tunnel interface driver, the packet to the remote device based at least in part on the metadata with which the packet was encapsulated. Various other methods, systems, and computer-readable media are also disclosed.
-
18.
公开(公告)号:US20180219805A1
公开(公告)日:2018-08-02
申请号:US15418717
申请日:2017-01-28
Applicant: Juniper Networks, Inc.
Inventor: Erin C. MacNeil , Sreekantha Rupavatharam , Hariprasad Shanmugam
IPC: H04L12/879 , H04L12/46 , G06F3/06
CPC classification number: H04L49/9026 , G06F3/0619 , G06F3/065 , G06F3/0656 , G06F3/067 , G06F9/545 , H04L12/4633 , H04L49/3009 , H04L69/161
Abstract: The disclosed computer-implemented method may include (1) identifying, in kernel space on a network device, a packet that is destined for a remote device, (2) passing, along with the packet, metadata for the packet to a packet buffer in kernel space on the network device, (3) framing, by the kernel module in kernel space, the packet such that the packet egresses via a tunnel interface driver on the network device, (4) encapsulating, by the tunnel interface driver, the packet with the metadata, and then (5) forwarding, by the tunnel interface driver, the packet to the remote device based at least in part on the metadata with which the packet was encapsulated. Various other methods, systems, and computer-readable media are also disclosed.
-
-
-
-
-
-
-