Programming a data network device using user defined scripts with licenses

    公开(公告)号:US10749904B2

    公开(公告)日:2020-08-18

    申请号:US15967448

    申请日:2018-04-30

    IPC分类号: H04L29/06 H04L29/08

    摘要: Provided are methods and systems for configuring a network device with user-defined instruction scripts. The method may commence with receiving a request for a network session between a client device and a server. The method may further include receiving a user-defined class and a user-defined object configuration. The user-defined class and the user-defined object configuration may include the user-defined instruction scripts provided by a user of the client device. The method may further include instructing an object virtual machine to generate at least one user-defined object based on the user-defined class and the user-defined object configuration. The method may continue with instructing an object virtual machine to generate at least one user-defined object based on the user-defined class and the user-defined object configuration.

    Reduction of volume of reporting data using content deduplication

    公开(公告)号:US10554517B2

    公开(公告)日:2020-02-04

    申请号:US15471858

    申请日:2017-03-28

    IPC分类号: G06F16/30 H04L12/26 G06F16/28

    摘要: Decreasing data transfer over a network may commence with collecting subscriber data. The method may continue with classifying the subscriber data into low frequency change data and high frequency change data based on predetermined criteria. The method may include storing the low frequency change data to a data storage. The method may continue with generating reporting data. The reporting data may include the high frequency change data and at least one data index pointer to the low frequency change data in the data storage. The method may further include providing the reporting data to a data processing node. The low frequency change data may include subscriber identifying data. The data reporting node may be further configured to obfuscate the subscriber identifying data. The at least one data index pointer may include a secure data identifier associated with the obfuscated subscriber identifying data.

    Mitigating TCP SYN DDOS attacks using TCP reset

    公开(公告)号:US10536481B2

    公开(公告)日:2020-01-14

    申请号:US16198981

    申请日:2018-11-23

    IPC分类号: H04L29/06

    摘要: Provided are methods and systems for recognizing network devices as trusted. A system for recognizing network devices as trusted may include a network module, a storage device, and a processor. The network module may be configured to receive a request from a network device to establish a data connection between the network device and a server based on a determination that the network device is trusted. The storage device may be configured to store a whitelist associated with a plurality of trusted network devices. The processor may be configured to determine that the network device is trusted. Based on the determination, the processor may associate the network device with the whitelist for a predetermined period of time.

    System and method to process a chain of network applications

    公开(公告)号:US10318288B2

    公开(公告)日:2019-06-11

    申请号:US14995136

    申请日:2016-01-13

    IPC分类号: G06F9/00 H04L12/24

    摘要: Facilitation of processing a chain of network applications by a network controller is provided herein. In some examples, a network controller comprising a fast path module receives a service request data packet from a client side session between a client and the network controller and determines that the service request data packet matches a network application chain order, the network application chain order indicating a configuration to apply a plurality of network applications. The fast path module processes the service request data packet according to the configuration indicated in the network application chain order.

    MITIGATING TCP SYN DDOS ATTACKS USING TCP RESET

    公开(公告)号:US20190098044A1

    公开(公告)日:2019-03-28

    申请号:US16198981

    申请日:2018-11-23

    IPC分类号: H04L29/06

    摘要: Provided are methods and systems for recognizing network devices as trusted. A system for recognizing network devices as trusted may include a network module, a storage device, and a processor. The network module may be configured to receive a request from a network device to establish a data connection between the network device and a server based on a determination that the network device is trusted. The storage device may be configured to store a whitelist associated with a plurality of trusted network devices. The processor may be configured to determine that the network device is trusted. Based on the determination, the processor may associate the network device with the whitelist for a predetermined period of time.

    DISTRIBUTING SERVICE SESSIONS
    27.
    发明申请

    公开(公告)号:US20180295182A1

    公开(公告)日:2018-10-11

    申请号:US16004265

    申请日:2018-06-08

    IPC分类号: H04L29/08 H04L12/725

    摘要: Provided are methods and systems for dynamically distributing a service session from a client device. The method may commence with receiving a packet associated with the service session from the client device by a gateway node. The method may include determining that the packet matches a service address in a forwarding policy. The method may continue with selecting one of a plurality of forwarding nodes for sending the packet to the one of the plurality of forwarding nodes. The method may include receiving the packet of the service session by the one of the plurality of forwarding nodes. The method may continue with determining that the packet matches the service address serviced by a servicing node of a plurality of servicing nodes. The method may further include sending the packet to the servicing node for forwarding the packet to a server by the servicing node.

    ELIMINATING DATA TRAFFIC REDIRECTION IN SCALABLE CLUSTERS

    公开(公告)号:US20180248805A1

    公开(公告)日:2018-08-30

    申请号:US15967423

    申请日:2018-04-30

    摘要: Provided are methods and systems for eliminating a redirection of data traffic in a cluster. An example method may include receiving, by one or more nodes of the cluster, a data packet associated with a service session. The method may include determining, by the node, that the data packet is directed to a further node in the cluster. The method may further include, in response to the determination, acquiring, by the node, a session context associated with the service session. Acquiring the session context may include sending, by the node, a request for the session context to the further node and receiving the session context from the further node. The method may further include processing, by the one or more nodes, the data packet based on the session context.

    SYSTEM AND METHOD TO BALANCE SERVERS BASED ON SERVER LOAD STATUS

    公开(公告)号:US20180213031A1

    公开(公告)日:2018-07-26

    申请号:US15936709

    申请日:2018-03-27

    IPC分类号: H04L29/08

    摘要: Provided are methods and systems for balancing servers based on a server load status. A method for balancing servers based on a server load status may commence with receiving, from a server of a plurality of servers, a service response to a service request. The service response may include a computing load of the server. The method may continue with receiving a next service request from a host. The method may further include determining, based on the computing load of the server, whether the server is available to process the next service request. The method may include selectively sending the next service request to the server based on the determination that the server is available to process the next service request.

    Distributed database in software driven networks

    公开(公告)号:US10002141B2

    公开(公告)日:2018-06-19

    申请号:US14320420

    申请日:2014-06-30

    摘要: Provided are methods and systems for implementing a distributed database in a data network. The method comprises receiving node data associated with one or more nodes of a plurality of nodes, updating the distributed database and replicating the distributed database to each of the plurality of nodes. The plurality of nodes comprises one or more cluster device, a cluster master, a traffic classification engine, a service node, and an orchestrator. The node data comprises node health, a number of total connections, node processing unit utilization, node memory status, destination server address, destination server capacity, destination server network connectivity, node dynamic state, node responsiveness. The distributed database comprises tables containing traffic map, node health information, traffic classification mapping, and service policy.