公开(公告)号：US11528320B1

公开(公告)日：2022-12-13

申请号：US17404093

申请日：2021-08-17

Applicant: Citrix Systems, Inc.

Inventor： Hrushikesh Shrinivas Paralikar

IPC: H04L67/1001 ,  H04L67/101 ,  H04L43/0888 ,  H04L61/103 ,  H04L61/4511 ,  H04L67/562 ,  H04L67/1029 ,  H04L67/1036

Abstract: Described herein are systems and methods for end user connection load balancing amongst multiple on-premise connector proxies deployed across geographic locations and reducing connection setup latency without using a shared or distributed database. The system can load balance connections deterministically amongst the on-premise connector proxies using load statistics. The system utilizes an intelligent DNS service that can use network experience data, service availability, and application metrics to provide sophisticated traffic management via DNS or API-based decisions. The system can include a domain name system (DNS) resolver configured to receive metrics for a first connector and a second connector of a data center of an entity, receive a DNS request including an entity identifier and a data center identifier; and transmit a response to the DNS request identifying a server selected based on the metrics identified using the entity identifier and the data center identifier.

公开(公告)号：US11463404B2

公开(公告)日：2022-10-04

申请号：US15485961

申请日：2017-04-12

Applicant: Avaya Inc.

Inventor： Joel M. Ezell ,  Manish Chatterjee ,  Biswajyoti Pal

IPC: H04L9/40 ,  H04L67/1036 ,  H04L67/63

Abstract: Embodiments disclosed herein provide systems and methods for quarantining communications at a network edge by routing traffic through a specialized network edge system. In a particular embodiment a method provides, identifying criteria indicating whether certain network traffic should be handled by the specialized network edge system. The method further provides receiving first information about first network traffic received at a first network edge system for a communication network. In response to determining, based on the first information, that the first network traffic satisfies the criteria, the method provides routing the first network traffic through the specialized network edge system.

公开(公告)号：US11425043B2

公开(公告)日：2022-08-23

申请号：US16902562

申请日：2020-06-16

Applicant: T-Mobile USA, Inc.

Inventor： Sergey Slovetskiy

IPC: H04L47/125 ,  H04L45/00 ,  H04L61/2521 ,  H04L9/40 ,  H04L69/164 ,  H04L69/22 ,  H04L67/1001 ,  H04L67/1036 ,  H04L61/2503 ,  H04L67/1027

Abstract: A middlebox system that maintains a load balancing configuration in a large scale IoT deployment is provided. The system performs reverse address translation for a first packet of a particular application from a first server to a first client according to a binding structure that couples a source address indicating the first client with (i) a destination addresses indicating the first server and (ii) an application client marker of the first client for the particular application. The system performs reverse address translation for a second packet of the particular application from a second server to the first client by using the application client marker in the binding structure to determine the source address indicating the first client.

公开(公告)号：US11334441B2

公开(公告)日：2022-05-17

申请号：US16427402

申请日：2019-05-31

Applicant: EMC IP HOLDING COMPANY LLC

Inventor： Ajay Potnis ,  Amit Dharmadhikari

IPC: G06F11/00 ,  G06F11/14 ,  G06F16/11 ,  H04L67/1036 ,  H04L67/1097 ,  H04L41/5006 ,  G06F16/182

Abstract: Snaps are distributed among data nodes for load balancing and overload avoidance. A snap is initially associated with a first VNAS server on a first data node that hosts the primary volume being snapped. A second data node is selected based on loading. The second data node may be in the same or a different cluster. A second VNAS server is instantiated on the second data node. The snap is then mounted on the second VNAS server. The second VNAS server may be configured as the target for all reads to the snap. If the second data node is in a different cluster than the snap may be copied or moved from a first SAN node to a second SAN node. Multiple copies of snaps may be distributed, and individual snaps and copies may be associated with different SLOs.

公开(公告)号：US20250106212A1

公开(公告)日：2025-03-27

申请号：US18974351

申请日：2024-12-09

Applicant: Aviatrix Systems, Inc.

Inventor： Xiaobo Sherry Wei ,  Ramakrishnan Kunnath

IPC: H04L9/40 ,  G06F9/455 ,  H04L12/66 ,  H04L67/1036

Abstract: In an embodiment, a secure object transfer system is described. The system features a virtual private cloud network (VPC) and a controller. The VPC includes a plurality of gateways and a network load balancer, which configured to conduct a load balancing scheme on access messages from computing devices deployed within an on-premises network to direct the access memory to one of the plurality of gateways for storage or retrieval of an object from a cloud-based storage element. Each gateway includes filtering logic to restrict access of the computing devices to certain cloud-based storage elements in accordance with a security policy. The controller is configured to maintain and update the security policy utilized by each gateway of the plurality of gateways.

公开(公告)号：US11909612B2

公开(公告)日：2024-02-20

申请号：US18102696

申请日：2023-01-28

Applicant: VMware LLC

Inventor： Murali Basavaiah ,  Anand Parthasarathy ,  Sreeram Iyer ,  Sambit Kumar Das ,  Narasimhan Gomatam Mandeyam

IPC: H04L43/065 ,  H04L43/10 ,  H04L67/1036 ,  H04L43/0805 ,  H04L47/783 ,  H04L47/70 ,  H04L67/1031 ,  H04L61/4511

CPC classification number: H04L43/065 ,  H04L43/0805 ,  H04L43/10 ,  H04L47/783 ,  H04L47/828 ,  H04L61/4511 ,  H04L67/1031 ,  H04L67/1036

Abstract: Some embodiments provide a novel method of performing health monitoring for resources associated with a global server load balancing (GSLB) system. This system is implemented by several domain name system (DNS) servers that perform DNS services for resources located at several geographically separate sites. The method identifies several different groupings of the resources. It then assigns the health monitoring of the different resource groups to different DNS servers. The method then configures each particular DNS server (1) to send health monitoring messages to the particular group of resources assigned to the particular DNS server, (2) to generate data by analyzing responses to the sent health monitoring messages, and (3) to distribute the generated data to the other DNS servers. The method in some embodiments is performed by a set of one or more controllers.

公开(公告)号：US20240056378A1

公开(公告)日：2024-02-15

申请号：US18492771

申请日：2023-10-23

Applicant: Snowflake Inc.

Inventor： Jonathan C. Allie ,  Seth Hettich ,  Aaron S. Joyner

IPC: H04L43/50 ,  H04L43/0805 ,  H04L43/0817 ,  H04L67/133 ,  H04L61/4541 ,  H04L67/02 ,  H04L67/1036 ,  H04L61/4511

CPC classification number: H04L43/50 ,  H04L43/0805 ,  H04L43/0817 ,  H04L67/133 ,  H04L61/4541 ,  H04L67/02 ,  H04L67/1036 ,  H04L61/4511

Abstract: A system may include a processing device and a memory storing instructions that, when executed by the processing device, causes the processing device to obtain a health check instruction that is specific to a name of a service that is associated with one or more endpoints, including performing a lookup with the name to obtain the health check instruction that is specific to the name. The processing device performs the one or more actions of the health check instruction to determine a health status of the one or more endpoints, and stores the health status of the one or more endpoints. In response to receiving a request to resolve the name from a client, the processing device returns the one or more endpoints based at least on the health status of the one or more endpoints.

公开(公告)号：US11863528B1

公开(公告)日：2024-01-02

申请号：US16002966

申请日：2018-06-07

Applicant: Amazon Technologies, Inc.

Inventor： Peter Chung

IPC: G06F15/16 ,  H04L9/40 ,  H04L61/2521 ,  H04L69/22 ,  H04L67/1036 ,  H04L61/4511

CPC classification number: H04L63/0263 ,  H04L61/2528 ,  H04L61/4511 ,  H04L63/0236 ,  H04L63/0281 ,  H04L63/101 ,  H04L67/1036 ,  H04L69/22

Abstract: A system and method for generating a set of destination IP address to be added into a firewall whitelist. The system receives a network packet transmitted through a firewall and determines whether the destination address of the network packet corresponds to at least one of computing resource of a plurality of computing resources. If so, the system transforms the destination address of the packet to another destination address of the corresponding computing resource. The system forwards the network packet to the destination address of the corresponding computing resource.

公开(公告)号：US11811639B2

公开(公告)日：2023-11-07

申请号：US18061218

申请日：2022-12-02

Applicant: Snowflake Inc.

Inventor： Jonathan C. Allie ,  Seth Hettich ,  Aaron S. Joyner

IPC: H04L43/50 ,  H04L67/02 ,  H04L67/133 ,  H04L43/0817 ,  H04L61/4541 ,  H04L61/4511 ,  H04L67/1036 ,  H04L43/0805

CPC classification number: H04L43/50 ,  H04L43/0805 ,  H04L43/0817 ,  H04L61/4511 ,  H04L61/4541 ,  H04L67/02 ,  H04L67/1036 ,  H04L67/133

Abstract: A system may include a processing device and a memory storing instructions that, when executed by the processing device, causes the processing device to discover one or more endpoints of a service in view of a name that is unique to the service. In response to receiving a request to resolve the name from a client, the processing device may obtain the one or more endpoints of that service in view of the name. The processing device may filter the one or more endpoints, in view of the name and return the one or more endpoints which are filtered, to the client.

公开(公告)号：US11698818B2

公开(公告)日：2023-07-11

申请号：US16611682

申请日：2018-05-03

Applicant: British Telecommunications Public Limited Company

Inventor： Robert Ghanea-Hercock

IPC: G06F9/50 ,  G06N20/00 ,  H04L67/1036 ,  G06F9/455 ,  G06F9/38 ,  G06F9/48 ,  G06F9/54 ,  G06F18/23 ,  G06F18/241

CPC classification number: G06F9/505 ,  G06F9/3836 ,  G06F9/45558 ,  G06F9/48 ,  G06F9/5005 ,  G06F9/5083 ,  G06F9/546 ,  G06F18/23 ,  G06F18/241 ,  G06N20/00 ,  G06F2009/4557 ,  H04L67/1036

Abstract: A computer implemented method of executing a plurality of discrete software modules each including a machine learning algorithm as an executable software component configurable to approximate a function relating a domain data set to a range data set; a data store; and a message handler as an executable software component arranged to receive input data and communicate output data for the module, wherein the message handler is adapted to determine domain parameters for the algorithm based on the input data and to generate the output data based on a result generated by the algorithm, each module having associated a metric of resource utilization by the module, the method including receiving a request for a machine learning task; and selecting a module from the plurality of modules for the task based on the metric associated with the module.