公开(公告)号：US08015139B2

公开(公告)日：2011-09-06

申请号：US12039703

申请日：2008-02-28

申请人： Paramvir Bahl ,  Ranveer Chandra ,  Srikanth Kandula ,  David A. Maltz ,  Ming Zhang ,  Albert Greenberg

发明人： Paramvir Bahl ,  Ranveer Chandra ,  Srikanth Kandula ,  David A. Maltz ,  Ming Zhang ,  Albert Greenberg

IPC分类号： G06N5/04

CPC分类号： G06N5/043

摘要： Candidates that are potentially responsible for user-perceptible network problems may be inferred. In an example embodiment, a system includes an inference engine to produce a list of candidates that are potentially responsible for user-perceptible network problems, with the candidates being network components that may include both services and network elements. A response to a service request may be a non response, an incorrect response, an untimely correct response, or a timely correct response. The user-perceptible network problems may include the untimely correct response as well as the non response and the incorrect response. In another example embodiment, a method includes monitoring a network and producing a list of candidates that are potentially responsible for user-perceptible network problems. The candidates of the list may include both services and network elements of the monitored network.

摘要翻译： 可能推断可能对用户可感知的网络问题负责的候选者。 在示例实施例中，系统包括推理引擎，以产生潜在地负责用户可感知的网络问题的候选者的列表，候选者是可以包括服务和网络元件的网络组件。 对服务请求的响应可以是非响应，不正确的响应，不合时宜的响应或及时的正确响应。 用户可感知的网络问题可能包括不合时宜的响应以及非响应和不正确的响应。 在另一示例性实施例中，一种方法包括监视网络并产生潜在地负责用户可感知网络问题的候选者列表。 该列表的候选者可以包括被监视网络的服务和网络元件。

公开(公告)号：US20100299349A1

公开(公告)日：2010-11-25

申请号：US12469160

申请日：2009-05-20

申请人： Albert Gordon Greenberg ,  Lihua Yuan ,  Randall Friend Kern ,  Jitendra Dattatraya Padhye ,  David A. Maltz ,  Parveen Kumar Patel ,  Murari Sridharan

发明人： Albert Gordon Greenberg ,  Lihua Yuan ,  Randall Friend Kern ,  Jitendra Dattatraya Padhye ,  David A. Maltz ,  Parveen Kumar Patel ,  Murari Sridharan

IPC分类号： G06F17/30 ,  H04L12/56

CPC分类号： G06F16/9574

摘要： An embodiment of the invention is directed to reducing search-response latency. The closest intermediate server can be located between a client computing device and a search engine. A search query is sent to the intermediate server in a first packet of a transport protocol handshake. A plurality of packets are received from the intermediate server. The plurality of packets are used to open a window associated with a transport protocol. A response related to the search query is received by the client.

摘要翻译： 本发明的实施例旨在减少搜索响应等待时间。 最接近的中间服务器可以位于客户端计算设备和搜索引擎之间。 搜索查询在传输协议握手的第一分组中被发送到中间服务器。 从中间服务器接收多个分组。 多个分组被用于打开与传输协议相关联的窗口。 客户端收到与搜索查询相关的响应。

公开(公告)号：US20100080144A1

公开(公告)日：2010-04-01

申请号：US12242775

申请日：2008-09-30

申请人： Albert Greenberg ,  David A. Maltz ,  Parantap Lahiri ,  Parveen K. Patel ,  Sudipta Sengupta

发明人： Albert Greenberg ,  David A. Maltz ,  Parantap Lahiri ,  Parveen K. Patel ,  Sudipta Sengupta

IPC分类号： H04L12/26

CPC分类号： H04L45/00 ,  H04L12/1863 ,  H04L45/16 ,  H04L45/22 ,  H04L45/28 ,  H04L45/38 ,  H04L45/745 ,  H04L47/125 ,  H04L47/15

摘要： Exemplary methods, systems, and computer program products describe selecting a gateway based on health and performance information of a plurality of gateways. The techniques describe gateways advertising health and performance information, computing devices creating a table of this health and performance information, and selecting a gateway using the table. In response to changes in the health and performance information, the computing device may select a different gateway. The process allows network traffic load to be distributed across a plurality of gateways. This process further provides resilience by allowing a plurality of active gateways to substitute for a non-functioning gateway.

摘要翻译： 描述了基于多个网关的健康和性能信息来选择网关的示例性方法，系统和计算机程序产品。 这些技术描述了网关广告健康和性能信息，计算设备创建这种健康和性能信息的表格，以及使用该表选择网关。 响应于健康和性能信息的变化，计算设备可以选择不同的网关。 该过程允许网络流量负载分布在多个网关上。 该过程通过允许多个活动网关来替代不起作用的网关进一步提供弹性。

公开(公告)号：US09363233B2

公开(公告)日：2016-06-07

申请号：US13526295

申请日：2012-06-18

申请人： Daniel R. Simon ,  Sharad Agarwal ,  David A. Maltz

发明人： Daniel R. Simon ,  Sharad Agarwal ,  David A. Maltz

IPC分类号： H04L29/06 ,  H04L12/66

CPC分类号： H04L63/1433 ,  H04L12/66 ,  H04L45/74 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/1408 ,  H04L63/1416 ,  H04L63/1441 ,  H04L63/1458 ,  H04L2463/146

摘要： In one kind of DoS attack, malicious customers may try to send a large number of filter requests against an innocent customer. In one implementation, a Filter Request Server (FRS) may allow a customer against who a filter request is made to dispute the implicit accusation of the filter request or stop sending malicious traffic. If the customer claims innocence, the FRS may log destination addresses of data packets sent by the customer and identify and ignore false filter requests if these filter requests come from customers who do not correspond to one or more of the destination addresses that have previously been logged by the FRS.

摘要翻译： 在一种DoS攻击中，恶意客户可能会尝试向无辜的客户发送大量的过滤器请求。 在一个实现中，过滤器请求服务器（FRS）可以允许客户针对哪个过滤器请求是对隐含的过滤器请求的指控或停止发送恶意流量提出异议。 如果客户声称无辜，FRS可能会记录客户发送的数据包的目的地址，如果这些过滤请求来自不符合先前已记录的一个或多个目标地址的客户，则会识别并忽略错误过滤器请求 由FRS。

公开(公告)号：US09274842B2

公开(公告)日：2016-03-01

申请号：US12825336

申请日：2010-06-29

申请人： David A. Maltz ,  Jonathan David Goldstein ,  Albert Greenberg ,  Charles Loboz ,  Parveen K. Patel

发明人： David A. Maltz ,  Jonathan David Goldstein ,  Albert Greenberg ,  Charles Loboz ,  Parveen K. Patel

IPC分类号： G06F15/173 ,  G06F9/50 ,  G06F11/30 ,  G06F11/34 ,  H04L12/26

CPC分类号： H04L43/0876 ,  G06F9/5027 ,  G06F11/3006 ,  G06F11/3072 ,  G06F11/3093 ,  G06F11/3409 ,  G06F11/3495 ,  G06F17/30864 ,  G06F2201/88 ,  G06F2209/5013 ,  H04L43/0817

摘要： Described is a server monitoring technology that is scalable to large numbers of servers, e.g., in a datacenter. Agents on servers run queries to monitor data sources for that server, such as performance counters and other events. The agents monitor their resource usage and those of monitored events to stay within an administrator-specified resource budget (policy), e.g., by modifying the running queries and/or monitoring parameters. A controller receives results of the monitoring, analyzes the results, and takes action as needed with respect to server operation and monitoring. The controller may dynamically update an agent's queries, monitoring parameters and/or monitored data post-processing operations. The controller may issue alerts and reports, including alerts indicative of inter-server problems between two or more servers.

摘要翻译： 描述了可扩展到大量服务器的服务器监控技术，例如在数据中心中。 服务器上的代理运行查询以监视该服务器的数据源，例如性能计数器和其他事件。 代理监视其资源使用情况和监视事件的资源使用情况，以保持在管理员指定的资源预算（策略）内，例如通过修改正在运行的查询和/或监视参数。 控制器接收监控结果，分析结果，并根据需要对服务器运行和监控采取行动。 控制器可以动态地更新代理的查询，监视参数和/或监视的数据后处理操作。 控制器可以发出警报和报告，包括指示两个或多个服务器之间的服务器间问题的警报。

公开(公告)号：US09049140B2

公开(公告)日：2015-06-02

申请号：US12949402

申请日：2010-11-18

申请人： Abhishek Singh ,  Ming Zhang ,  Albert G. Greenberg ,  Parantap Lahiri ,  David A. Maltz ,  Srinivas Krishnan

发明人： Abhishek Singh ,  Ming Zhang ,  Albert G. Greenberg ,  Parantap Lahiri ,  David A. Maltz ,  Srinivas Krishnan

IPC分类号： H04L12/707 ,  H04L12/725 ,  H04L12/801 ,  H04L29/12

CPC分类号： H04L45/22 ,  H04L45/302 ,  H04L47/10 ,  H04L61/25

摘要： A source device obtains a data packet that includes both a destination address and a payload. The source device selects an exit point address of multiple exit point addresses corresponding to the destination address based on one or more policies. The source device encapsulates the data packet with a header that includes the selected exit point address, and the encapsulated data packet is provided to the backbone network. The encapsulated data packet is routed through the backbone network based on the exit point address, and an edge router of the backbone network identifies an interface of the edge router that corresponds to the exit point address. The header is removed from the encapsulated data packet, and the data packet is added to a buffer of the interface for routing to one or more other devices outside of the backbone network.

摘要翻译： 源设备获得包括目的地地址和有效载荷的数据分组。 源设备基于一个或多个策略来选择与目的地地址相对应的多个出口点地址的出口点地址。 源设备用包含所选出口点地址的报头封装数据包，并将封装的数据包提供给骨干网。 封装的数据包根据出口点地址通过骨干网进行路由，骨干网边缘路由器识别出口点地址对应的边缘路由器接口。 从封装的数据包中删除标题，并将数据包添加到接口的缓冲区，以便路由到骨干网以外的一个或多个其他设备。

公开(公告)号：US09025434B2

公开(公告)日：2015-05-05

申请号：US13617097

申请日：2012-09-14

申请人： David A. Maltz ,  Lihua Yuan ,  Ming Zhang ,  Xin Wu ,  Daniel Joseph Turner ,  Chao-Chih Chen

发明人： David A. Maltz ,  Lihua Yuan ,  Ming Zhang ,  Xin Wu ,  Daniel Joseph Turner ,  Chao-Chih Chen

IPC分类号： H04L12/24 ,  H04L12/26

CPC分类号： H04L41/0654 ,  H04L41/0883 ,  H04L41/145 ,  H04L41/147 ,  H04L43/0817 ,  H04L43/0823

摘要： The subject disclosure is directed towards a technology that automatically mitigates datacenter failures, instead of relying on human intervention to diagnose and repair the network. Via a mitigation pipeline, when a network failure is detected, a candidate set of components that are likely to be the cause of the failure is identified, with mitigation actions iteratively targeting each component to attempt to alleviate the problem. The impact to the network is estimated to ensure that the redundancy present in the network will be able to handle the mitigation action without adverse disruption to the network.

摘要翻译： 主题公开涉及一种自动减轻数据中心故障的技术，而不是依靠人为干预来诊断和修复网络。 通过缓解流程，当检测到网络故障时，识别可能是故障原因的一组候选组件，其中缓解措施迭代地针对每个组件来尝试减轻该问题。 估计对网络的影响可确保网络中存在的冗余能够处理缓解动作，而不会对网络造成不利影响。

公开(公告)号：US20140078882A1

公开(公告)日：2014-03-20

申请号：US13617097

申请日：2012-09-14

申请人： David A. Maltz ,  Lihua Yuan ,  Ming Zhang ,  Xin Wu ,  Daniel Joseph Turner ,  Chao-Chih Chen

发明人： David A. Maltz ,  Lihua Yuan ,  Ming Zhang ,  Xin Wu ,  Daniel Joseph Turner ,  Chao-Chih Chen

IPC分类号： H04L12/24

CPC分类号： H04L41/0654 ,  H04L41/0883 ,  H04L41/145 ,  H04L41/147 ,  H04L43/0817 ,  H04L43/0823

摘要： The subject disclosure is directed towards a technology that automatically mitigates datacenter failures, instead of relying on human intervention to diagnose and repair the network. Via a mitigation pipeline, when a network failure is detected, a candidate set of components that are likely to be the cause of the failure is identified, with mitigation actions iteratively targeting each component to attempt to alleviate the problem. The impact to the network is estimated to ensure that the redundancy present in the network will be able to handle the mitigation action without adverse disruption to the network.

摘要翻译： 主题公开涉及一种自动减轻数据中心故障的技术，而不是依靠人为干预来诊断和修复网络。 通过缓解流程，当检测到网络故障时，识别可能是故障原因的一组候选组件，其中缓解措施迭代地针对每个组件来尝试减轻该问题。 估计对网络的影响可确保网络中存在的冗余能够处理缓解动作，而不会对网络造成不利影响。

公开(公告)号：US20130346968A1

公开(公告)日：2013-12-26

申请号：US13530064

申请日：2012-06-21

申请人： Yousef A. Khalidi ,  Deepak Bansal ,  Changhoon Kim ,  Srikanth Kandula ,  David A. Maltz

发明人： Yousef A. Khalidi ,  Deepak Bansal ,  Changhoon Kim ,  Srikanth Kandula ,  David A. Maltz

IPC分类号： G06F15/177 ,  G06F9/455 ,  G06F21/00

CPC分类号： G06F8/61 ,  G06F9/5072

摘要： The provisioning of a host computing system by a controller located over a wide area network. The host computing system has power-on code that automatically executes upon powering up, and causes the host to notify the controller of the host address. In a first level of bootstrapping, the controller instructs the host to download a maintenance operating system. The host responds by downloading and installing a maintenance operating system, enabling further bootstrapping. The persistent memory may further have security data, such as a public key, that allows the host computing system to securely identify the source of the download instructions (and subsequent instructions) as originating from the controller. A second level of bootstrapping may accomplish the configuring of the host with a hypervisor and a host agent. A third level of bootstrapping may accomplish the provisioning of virtual machines on the host.

摘要翻译： 由位于广域网上的控制器提供主计算系统。 主机计算系统具有在上电时自动执行的上电代码，并使主机向控制器通知主机地址。 在第一级自举中，控制器指示主机下载维护操作系统。 主机通过下载和安装维护操作系统进行响应，实现进一步的自举。 持久存储器还可以具有诸如公开密钥的安全数据，其允许主计算系统将源自该控制器的下载指令（和后续指令）的源安全地标识。 第二级引导可以使用管理程序和主机代理完成主机的配置。 第三级引导可以完成主机上虚拟机的配置。

公开(公告)号：US08438244B2

公开(公告)日：2013-05-07

申请号：US12766726

申请日：2010-04-23

申请人： Edmund B. Nightingale ,  Jeremy E. Elson ,  Jonathan R. Howell ,  Galen C. Hunt ,  David A. Maltz

发明人： Edmund B. Nightingale ,  Jeremy E. Elson ,  Jonathan R. Howell ,  Galen C. Hunt ,  David A. Maltz

IPC分类号： G06F15/16

CPC分类号： G06F17/30194

摘要： A system including at least one storage node and at least one computation node connected by a switch is described herein. Each storage node has one or more storage units and one or more network interface components, the collective bandwidths of the storage units and the network interface components being proportioned to one another to enable communication to and from other nodes at the collective bandwidth of the storage units. Each computation node has logic configured to make requests of storage nodes, an input/output bus, and one or more network interface components, the bandwidth of the bus and the collective bandwidths of the network interface components being proportioned to one another to enable communication to and from other nodes at the bandwidth of the input/output bus.

摘要翻译： 本文描述了包括至少一个存储节点和由交换机连接的至少一个计算节点的系统。 每个存储节点具有一个或多个存储单元和一个或多个网络接口组件，存储单元和网络接口组件的集合带宽彼此成比例，以使得能够在存储单元的集合带宽处与其他节点进行通信 。 每个计算节点具有被配置为进行存储节点，输入/输出总线以及一个或多个网络接口组件的请求的逻辑，总线的带宽和网络接口组件的集体带宽彼此成比例，以使得能够 并从输入/输出总线带宽的其他节点。