-
公开(公告)号:US10958627B2
公开(公告)日:2021-03-23
申请号:US16858874
申请日:2020-04-27
Applicant: Mellanox Technologies, Ltd.
Inventor: Adi Menachem , Liran Liss , Boris Pismenny
Abstract: Computing apparatus includes a host processor, which runs a virtual machine monitor (VMM), which supports a plurality of virtual machines and includes a cryptographic security software module. A network interface controller (NIC) links the host processor to a network so as to transmit and receive data packets from and to the virtual machines and includes a cryptographic security hardware logic module, which when invoked by the VMM, applies the cryptographic security protocol to the data packets while maintaining a state context of the protocol with respect to each of the virtual machines. Upon encountering an exception in applying the cryptographic security protocol, the NIC transfers the data packet, together with the state context of the cryptographic security protocol with respect to the given virtual machine, to the cryptographic security software module for processing.
-
公开(公告)号:US20190190892A1
公开(公告)日:2019-06-20
申请号:US15841339
申请日:2017-12-14
Applicant: Mellanox Technologies, Ltd.
Inventor: Adi Menachem , Liran Liss , Boris Pismenny
CPC classification number: H04L63/0428 , G06F9/45533 , G06F9/45558 , G06F21/53 , G06F21/602 , G06F2009/45587 , G06F2009/45595 , H04L9/0897 , H04L9/14 , H04L9/3226 , H04L63/0485 , H04L63/164 , H04L2209/12
Abstract: Computing apparatus includes a host processor, which runs a virtual machine monitor (VMM), which supports a plurality of virtual machines and includes a cryptographic security software module. A network interface controller (NIC) links the host processor to a network so as to transmit and receive data packets from and to the virtual machines and includes a cryptographic security hardware logic module, which when invoked by the VMM, applies the cryptographic security protocol to the data packets while maintaining a state context of the protocol with respect to each of the virtual machines. Upon encountering an exception in applying the cryptographic security protocol, the NIC transfers the data packet, together with the state context of the cryptographic security protocol with respect to the given virtual machine, to the cryptographic security software module for processing.
-
公开(公告)号:US20250148103A1
公开(公告)日:2025-05-08
申请号:US19017665
申请日:2025-01-12
Applicant: Mellanox Technologies, Ltd.
Inventor: Miriam Menes , Liran Liss , Noam Bloch , Idan Borshteen , Boris Pismenny , Ariel Shahar
IPC: G06F21/60
Abstract: In one embodiment, a secure distributed processing system includes a plurality of nodes connected over a network, and configured to process a plurality of tasks, each one of the nodes including a processor to process task-specific data, and a network interface controller (NIC) to connect to other ones of the nodes over the network, compute task-and-node-specific communication keys for securing communication with ones of the nodes over the network based on task-specific master keys and node-specific data, and securely communicate the processed task-specific data with the ones of the nodes over the network based on the task-and-node-specific communication keys.
-
公开(公告)号:US12218860B2
公开(公告)日:2025-02-04
申请号:US16932765
申请日:2020-07-19
Applicant: Mellanox Technologies, Ltd.
Inventor: Gal Yefet , Avi Urman , Gil Kremer , Lior Narkis , Boris Pismenny
IPC: H04L49/90 , G06F9/54 , H04L47/2441 , H04L69/22
Abstract: A network node includes a network adapter and a host. The network adapter is coupled to a communication network. The host includes a processor running a client process and a communication stack, and is configured to receive packets from the communication network, and classify the received packets into respective flows that are associated with respective chunks in a receive buffer, to distribute payloads of the received packets among the chunks so that payloads of packets classified to a given flow are stored in a given chunk assigned to the given flow, and to notify the communication stack of the payloads in the given chunk, for transferring the payloads in the given chunk to the client process.
-
公开(公告)号:US20240406212A1
公开(公告)日:2024-12-05
申请号:US18595475
申请日:2024-03-05
Applicant: Mellanox Technologies, Ltd.
Inventor: Boris Pismenny , Miriam Menes , Liran Liss
Abstract: In one embodiment, a local networking device includes a host interface to receive packets from a local host device, packet processing hardware to receive cryptographic material offloaded from the local host device over the host interface, perform cryptographic operations on the packets based on the cryptographic material, generate datagram transport layer security (DTLS) headers including respective DTLS sequence numbers in hardware, and encapsulate the packets with the DTLS headers in hardware, and a network interface to send the packets with the DTLS headers to a remote networking device over a packet data network.
-
公开(公告)号:US11934658B2
公开(公告)日:2024-03-19
申请号:US17527197
申请日:2021-11-16
Applicant: MELLANOX TECHNOLOGIES, LTD.
Inventor: Boris Pismenny , Oren Duer , Dror Goldenberg
IPC: G06F3/06
CPC classification number: G06F3/0613 , G06F3/0647 , G06F3/0659 , G06F3/067
Abstract: A peripheral device includes a host interface and processing circuitry. The host interface is to communicate with one or more hosts over a peripheral bus.
The processing circuitry is to expose on the peripheral bus a peripheral-bus device that communicates with the one or more hosts using one or more instances of at least one bus storage protocol, to receive, using the exposed peripheral-bus device, Input/Output (I/O) transactions that are issued by the one or more hosts, and to complete the I/O transactions for the one or more hosts in accordance with one or more instances of at least one network storage protocol, by running at least part of a host-side protocol stack of the at least one network storage protocol.-
公开(公告)号:US11726666B2
公开(公告)日:2023-08-15
申请号:US17372466
申请日:2021-07-11
Applicant: Mellanox Technologies, Ltd.
Inventor: Ben Ben-Ishay , Boris Pismenny , Yorai Itzhak Zack , Khalid Manaa , Liran Liss , Uria Basher , Or Gerlitz , Miriam Menes
IPC: G06F12/00 , G06F3/06 , H04L1/00 , H04L1/1867
CPC classification number: G06F3/0619 , G06F3/067 , G06F3/0611 , G06F3/0659 , G06F3/0679 , H04L1/0041 , H04L1/0045 , H04L1/189
Abstract: A network adapter includes a network interface controller and a processor. The network interface controller is to communicate over a peripheral bus with a host, and over a network with a remote storage device. The processor is to expose on the peripheral bus a peripheral-bus device that communicates with the host using a bus storage protocol, to receive first I/O transactions of the bus storage protocol from the host, via the exposed peripheral-bus device, and to complete the first I/O transactions in the remote storage device by (i) translating between the first I/O transactions and second I/O transactions of a network storage protocol, and (ii) executing the second I/O transactions in the remote storage device. For receiving and completing the first I/O transactions, the processor is to cause the network interface controller to transfer data directly between the remote storage device and a memory of the host using zero-copy.
-
公开(公告)号:US11502948B2
公开(公告)日:2022-11-15
申请号:US17108002
申请日:2020-12-01
Applicant: Mellanox Technologies, Ltd
Inventor: Boris Pismenny , Miriam Menes , Idan Burstein , Liran Liss , Noam Bloch , Ariel Shahar
IPC: H04L45/00 , H04L45/42 , G06F11/10 , H04L69/163 , H04L69/22
Abstract: A system includes a host processor, which has a host memory and is coupled to store data in a non-volatile memory in accordance with a storage protocol. A network interface controller (NIC) receives data packets conveyed over a packet communication network from peer computers containing, in payloads of the data packets, data records that encode data in accordance with the storage protocol for storage in the non-volatile memory. The NIC processes the data records in the data packets that are received in order in each flow from a peer computer and extracts and writes the data to the host memory, and when a data packet arrives out of order, writes the data packet to the host memory without extracting the data and processes the data packets in the flow so as to recover context information for use in processing the data records in subsequent data packets in the flow.
-
公开(公告)号:US20200259803A1
公开(公告)日:2020-08-13
申请号:US16858874
申请日:2020-04-27
Applicant: Mellanox Technologies, Ltd.
Inventor: Adi Menachem , Liran Liss , Boris Pismenny
Abstract: Computing apparatus includes a host processor, which runs a virtual machine monitor (VMM), which supports a plurality of virtual machines and includes a cryptographic security software module. A network interface controller (NIC) links the host processor to a network so as to transmit and receive data packets from and to the virtual machines and includes a cryptographic security hardware logic module, which when invoked by the VMM, applies the cryptographic security protocol to the data packets while maintaining a state context of the protocol with respect to each of the virtual machines. Upon encountering an exception in applying the cryptographic security protocol, the NIC transfers the data packet, together with the state context of the cryptographic security protocol with respect to the given virtual machine, to the cryptographic security software module for processing.
-
公开(公告)号:US20190116127A1
公开(公告)日:2019-04-18
申请号:US16159767
申请日:2018-10-15
Applicant: Mellanox Technologies, Ltd.
Inventor: Boris Pismenny , Liran Liss , Ilya Lesokhin , Haggai Eran , Adi Menachem
IPC: H04L12/833 , H04L29/06 , H04L12/931 , H04L12/851 , H04L29/08
Abstract: Packet processing apparatus includes a first interface coupled to a host processor and a second interface configured to transmit and receive data packets to and from a packet communication network. A memory holds context information with respect to one or more flows of the data packets conveyed between the host processor and the network in accordance with a reliable transport protocol and with respect to encoding, in accordance with a session-layer protocol, of data records that are conveyed in the payloads of the data packets in the one or more flows. Processing circuitry, coupled between the first and second interfaces, transmits and receives the data packets and includes acceleration logic, which encodes and decodes the data records in accordance with the session-layer protocol using the context information while updating the context information in accordance with the serial numbers and the data records of the transmitted data packets.
-
-
-
-
-
-
-
-
-