公开(公告)号：US20180295053A1

公开(公告)日：2018-10-11

申请号：US15483534

申请日：2017-04-10

Applicant: Cisco Technology, Inc.

Inventor： Kent Leung ,  Jianxin Wang

IPC: H04L12/721 ,  H04L12/851 ,  H04L12/741 ,  H04L29/08

CPC classification number: H04L45/38 ,  H04L43/026 ,  H04L45/745 ,  H04L47/2483 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/2521 ,  H04L67/2861

Abstract: An extended service-function chain (SFC) proxy is hosted on a network node and connected to a service path formed by one or more network nodes hosting a chain of service-functions applied to packets traversing the service path. The packets each include a service header having a service path identifier and a service index. A packet of a traffic flow destined for a service-function is received from the service path and sent to the service-function. An indication to offload the traffic flow is received from the service-function. The indication is stored in a flow table having entries each identifying a respective traffic flow. A subsequent packet of the traffic flow is received from the service path. The flow table is searched for the indication to offload the traffic flow. Upon finding the indication, the service-function is bypassed, and the subsequent packet is forwarded along the service path.

公开(公告)号：US20160337312A1

公开(公告)日：2016-11-17

申请号：US14709777

申请日：2015-05-12

Applicant: Cisco Technology, Inc.

Inventor： Kevin A. Buchanan ,  Andrew E. Ossipov ,  Kent Leung ,  Xun Wang ,  Zhijun Liu ,  Weiwei Kang

IPC: H04L29/06

CPC classification number: H04L63/0227 ,  H04L47/10 ,  H04L63/0254

Abstract: A method operable in a security device cluster having a plurality of security devices each configured to receive respective data flows. The method includes receiving a first segment of a flow at a first security device of the plurality of security devices, sending the first segment of the flow toward a destination node without the first security device of the plurality of security devices asserting ownership over the flow, receiving, from the destination node, a second segment of the flow at a second security device of the plurality of security devices, the second segment of the flow being responsive to the first segment, asserting, by the second security device of the plurality of security devices, ownership over the flow, and forwarding, from the first security device, packets of the flow subsequently received by the first security device to the second security device.

Abstract translation: 一种在具有多个安全设备的安全设备集群中可操作的方法，每个安全设备被配置为接收相应的数据流。 该方法包括在多个安全设备中的第一安全设备处接收流的第一段，将流的第一段发送到目的地节点，而不使多个安全设备中的第一安全设备声明对流的所有权， 从所述目的地节点接收在所述多个安全设备中的第二安全设备处的所述流的第二段，所述流的第二段响应于所述第一段，由所述第二安全设备断言所述多个安全性 设备，流量的所有权以及来自第一安全设备的转发，随后由第一安全设备接收的流的分组传送到第二安全设备。

公开(公告)号：US09203753B2

公开(公告)日：2015-12-01

申请号：US14089006

申请日：2013-11-25

Applicant: Cisco Technology, Inc.

Inventor： Kent Leung ,  Hy Quoc Pham ,  Jayaraman Iyer ,  Xun Wang ,  Andrew E. Ossipov

IPC: H04L12/741 ,  H04L29/08

CPC classification number: H04L45/745 ,  H04L45/54 ,  H04L67/327

Abstract: Techniques are presented herein for optimizing and load balancing network traffic exchanged between devices in a network environment. At a first device in a cluster of devices in a network, a packet is received from a second device in the cluster. The packet comprises identifier information that is assigned to the first device. The identifier information is reassigned to the second device in the cluster such that subsequent packets with the identifier information are sent directly to the second device. A mapping table is updated to indicate that the identifier information is reassigned to the second device.

Abstract translation: 本文介绍了技术来优化和负载平衡网络环境中设备之间交换的网络流量。 在网络中的设备集群中的第一设备处，从群集中的第二设备接收分组。 分组包括分配给第一设备的标识符信息。 标识符信息被重新分配给群集中的第二设备，使得具有标识符信息的后续分组被直接发送到第二设备。 映射表被更新以指示标识符信息被重新分配给第二设备。

公开(公告)号：US09113437B2

公开(公告)日：2015-08-18

申请号：US13975105

申请日：2013-08-23

Applicant: Cisco Technology, Inc.

Inventor： Kent Leung ,  Alpesh Patel ,  Naveen Paulkandasamy ,  Stefan Raab

IPC: H04W4/00 ,  H04W60/00 ,  H04W8/12 ,  H04W8/06 ,  H04W80/04

CPC classification number: H04W8/26 ,  H04W8/065 ,  H04W8/082 ,  H04W8/12 ,  H04W60/005 ,  H04W80/04

Abstract: The disclosed embodiments support mobility internal and external to enterprise networks. Service providers provide mobility by providing Home Agent functionality corresponding to each Enterprise network. In this manner, mobility may be provided to Mobile Nodes both internal and external to their enterprise networks. Moreover, data packets may be transmitted by Mobile Nodes to Correspondent Nodes, whether they are within their enterprise network, the Service Provider network, or the Internet.

Abstract translation: 所公开的实施例支持企业网络内部和外部的移动性。 服务提供商通过提供与每个企业网络相对应的归属代理功能来提供移动性。 以这种方式，移动性可以被提供给他们的企业网络内部和外部的移动节点。 此外，数据分组可以由移动节点发送到通信节点，无论它们在其企业网络，服务提供商网络还是因特网内。