公开(公告)号：US09860279B2

公开(公告)日：2018-01-02

申请号：US14929400

申请日：2015-11-01

Applicant: Nicira, Inc.

Inventor： Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Alok S. Tiagi ,  Kausum Kumar

IPC: H04L29/06 ,  H04L12/46 ,  H04W12/08 ,  H04W76/02 ,  H04L29/12 ,  G06F17/30 ,  H04L29/08 ,  H04L12/24

CPC classification number: H04L63/20 ,  G06F17/30958 ,  H04L12/4641 ,  H04L41/5045 ,  H04L61/256 ,  H04L61/2571 ,  H04L61/2585 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/0272 ,  H04L63/029 ,  H04L63/08 ,  H04L63/105 ,  H04L67/1004 ,  H04L67/1097 ,  H04L69/22 ,  H04W12/08 ,  H04W76/12

Abstract: Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.

公开(公告)号：US20170180423A1

公开(公告)日：2017-06-22

申请号：US14975583

申请日：2015-12-18

Applicant: Nicira, Inc.

Inventor： Srinivas Nimmagadda ,  Jayant Jain ,  Anirban Sengupta ,  Subrahmanyam Manuguri ,  Alok S. Tiagi

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/20 ,  H04L63/0263

Abstract: Some embodiments of the invention introduce cloud template awareness in the service policy framework. Some embodiments provide one or more service rule processing engines that natively support (1) template-specific dynamic groups and template-specific rules, and (2) dynamic security tag concepts. A service rule processing engine of some embodiments natively supports template-specific dynamic groups and rules as it can directly process service rules that are defined in terms of dynamic component groups, template identifiers, template instance identifiers, and/or template match criteria. Examples of such services can include any kind of middlebox services, such as firewalls, load balancers, network address translators, intrusion detection systems, intrusion prevention systems, etc.

公开(公告)号：US20240422083A1

公开(公告)日：2024-12-19

申请号：US18821664

申请日：2024-08-30

Applicant: Nicira, Inc.

Inventor： Alok S. Tiagi ,  Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Rick Lund

IPC: H04L43/04 ,  H04L41/5009 ,  H04L43/08 ,  H04L67/02 ,  H04L67/1001 ,  H04L69/22

Abstract: A method of collecting health check metrics for a network is provided. The method, at a deep packet inspector on a physical host in a datacenter, receives a copy of a network packet from a load balancer. The packet includes a plurality of layers. Each layer corresponds to a communication protocol in a plurality of communication protocols. The method identifies an application referenced in the packet. The method analyzes the information in one or more layers of the packet to determine metrics for the source application. The method sends the determined metrics to the load balancer.

公开(公告)号：US12081419B2

公开(公告)日：2024-09-03

申请号：US18227302

申请日：2023-07-28

Applicant: Nicira, Inc.

Inventor： Alok S. Tiagi ,  Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Rick Lund

IPC: H04L43/04 ,  H04L43/08 ,  H04L67/02 ,  H04L67/1001 ,  H04L69/22 ,  H04L41/5009

CPC classification number: H04L43/04 ,  H04L43/08 ,  H04L67/02 ,  H04L67/1001 ,  H04L69/22 ,  H04L41/5009

Abstract: A method of collecting health check metrics for a network is provided. The method, at a deep packet inspector on a physical host in a datacenter, receives a copy of a network packet from a load balancer. The packet includes a plurality of layers. Each layer corresponds to a communication protocol in a plurality of communication protocols. The method identifies an application referenced in the packet. The method analyzes the information in one or more layers of the packet to determine metrics for the source application. The method sends the determined metrics to the load balancer.

公开(公告)号：US11750482B2

公开(公告)日：2023-09-05

申请号：US17334682

申请日：2021-05-28

Applicant: Nicira, Inc.

Inventor： Alok S. Tiagi ,  Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Rick Lund

IPC: G06F15/173 ,  H04L43/04 ,  H04L67/02 ,  H04L69/22 ,  H04L67/1001 ,  H04L43/08 ,  H04L41/5009

CPC classification number: H04L43/04 ,  H04L43/08 ,  H04L67/02 ,  H04L67/1001 ,  H04L69/22 ,  H04L41/5009

Abstract: A method of collecting health check metrics for a network is provided. The method, at a deep packet inspector on a physical host in a datacenter, receives a copy of a network packet from a load balancer. The packet includes a plurality of layers. Each layer corresponds to a communication protocol in a plurality of communication protocols. The method identifies an application referenced in the packet. The method analyzes the information in one or more layers of the packet to determine metrics for the source application. The method sends the determined metrics to the load balancer.

公开(公告)号：US20190342346A1

公开(公告)日：2019-11-07

申请号：US16517554

申请日：2019-07-20

Applicant: Nicira, Inc.

Inventor： Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Alok S. Tiagi ,  Kausum Kumar

IPC: H04L29/06 ,  G06F16/901 ,  H04L29/08 ,  H04L12/46 ,  H04L12/24 ,  H04W12/08 ,  H04L29/12 ,  H04W76/12

Abstract: Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.

公开(公告)号：US10341297B2

公开(公告)日：2019-07-02

申请号：US14975570

申请日：2015-12-18

Applicant: Nicira, Inc.

Inventor： Srinivas Nimmagadda ,  Jayant Jain ,  Anirban Sengupta ,  Subrahmanyam Manuguri ,  Alok S. Tiagi

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/24

Abstract: Some embodiments of the invention introduce cloud template awareness in the service policy framework. Some embodiments provide one or more service rule processing engines that natively support (1) template-specific dynamic groups and template-specific rules, and (2) dynamic security tag concepts. A service rule processing engine of some embodiments natively supports template-specific dynamic groups and rules as it can directly process service rules that are defined in terms of dynamic component groups, template identifiers, template instance identifiers, and/or template match criteria. Examples of such services can include any kind of middlebox services, such as firewalls, load balancers, network address translators, intrusion detection systems, intrusion prevention systems, etc.

公开(公告)号：US10051002B2

公开(公告)日：2018-08-14

申请号：US14929402

申请日：2015-11-01

Applicant: Nicira, Inc.

Inventor： Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Alok S. Tiagi ,  Kausum Kumar

IPC: G06F15/173 ,  H04L29/06 ,  H04L12/46 ,  H04W12/08 ,  H04L29/12 ,  G06F17/30 ,  H04L29/08 ,  H04L12/24 ,  H04W76/12

Abstract: Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.

公开(公告)号：US20180063195A1

公开(公告)日：2018-03-01

申请号：US15490658

申请日：2017-04-18

Applicant: Nicira, Inc.

Inventor： Srinivas Nimmagadda ,  Jayant Jain ,  Anirban Sengupta

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/0263 ,  H04L63/1408

Abstract: Some embodiments provide a method for defining an adaptable monitoring profile for a network. The defined network monitoring profile is independent of the security policy defined for the network and includes one or more log generation rules, each of which defines a logging policy for a set of data compute nodes (DCNs) that share a common attribute. A log generation rule specifies whether the network activities of a set of DCNs that share a common attribute should be logged or not. A log generation rule can also specify other logging parameters such as priority level of the logs and the required logging protocol for transmission of the logs. The logging policy of a log generation rule is associated with a set of service rules (e.g., firewall rules) through a dynamic service group, and is applied to the service rules when any of these rules is triggered.

公开(公告)号：US09906562B2

公开(公告)日：2018-02-27

申请号：US14929404

申请日：2015-11-01

Applicant: Nicira, Inc.

Inventor： Jayant Jain ,  Anirban Sengupta ,  Srinivas Nimmagadda ,  Alok S. Tiagi ,  Kausum Kumar

IPC: H04L12/28 ,  H04L29/06 ,  H04L12/46 ,  H04W12/08 ,  H04W76/02 ,  H04L29/12 ,  G06F17/30 ,  H04L29/08 ,  H04L12/24

CPC classification number: H04L63/20 ,  G06F17/30958 ,  H04L12/4641 ,  H04L41/5045 ,  H04L61/256 ,  H04L61/2571 ,  H04L61/2585 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/0272 ,  H04L63/029 ,  H04L63/08 ,  H04L63/105 ,  H04L67/1004 ,  H04L67/1097 ,  H04L69/22 ,  H04W12/08 ,  H04W76/12

Abstract: Some embodiments provide novel methods for processing remote-device data messages in a network based on data-message attributes from a remote device management (RDM) system. For instance, the method of some embodiments identifies a set of RDM attributes associated with a data message, and then performs one or more service operations based on identified RDM attribute set.