Methods and apparatus related to virtualization of data center resources

    公开(公告)号:US11451491B2

    公开(公告)日:2022-09-20

    申请号:US16704947

    申请日:2019-12-05

    Abstract: In one embodiment, an apparatus includes a switch core that has a multi-stage switch fabric. A first set of peripheral processing devices coupled to the multi-stage switch fabric by a set of connections that have a protocol. Each peripheral processing device from the first set of peripheral processing devices is a storage node that has virtualized resources. The virtualized resources of the first set of peripheral processing devices collectively define a virtual storage resource interconnected by the switch core. A second set of peripheral processing devices coupled to the multi-stage switch fabric by a set of connections that have the protocol. Each peripheral processing device from the first set of peripheral processing devices is a compute node that has virtualized resources. The virtualized resources of the second set of peripheral processing devices collectively define a virtual compute resource interconnected by the switch core.

    Emulating output queued behavior in a virtual output queue switch

    公开(公告)号:US10721187B1

    公开(公告)日:2020-07-21

    申请号:US15599394

    申请日:2017-05-18

    Abstract: A system and method for routing network packets. A switch fabric connects a plurality of forwarding units, including an egress forwarding unit and two or more ingress forwarding units, each ingress forwarding unit forwarding network packets to the egress forwarding unit via the switch fabric. The egress forwarding unit includes a scheduler and an output queue. Each ingress forwarding unit includes a Virtual Output Queue (VOQ) connected to the output queue and a VOQ manager. The scheduler receives time of arrival information for network packets stored in the VOQs, determines, based on the time of arrival information for each network packet, a device resident time for the network packets stored in the VOQs, and requests, from one of the VOQs and based on the device resident times, the network packet with the longest device resident time.

    Methods and apparatus related to a flexible data center security architecture

    公开(公告)号:US10454849B2

    公开(公告)日:2019-10-22

    申请号:US15990102

    申请日:2018-05-25

    Abstract: In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.

    Hardware implementation of complex firewalls using chaining technique
    25.
    发明授权
    Hardware implementation of complex firewalls using chaining technique 有权
    使用链接技术的复杂防火墙的硬件实现

    公开(公告)号:US09391958B2

    公开(公告)日:2016-07-12

    申请号:US14318830

    申请日:2014-06-30

    CPC classification number: H04L63/0263 H04L63/02 H04L63/0209

    Abstract: A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.

    Abstract translation: 防火墙设备可以包括包括过滤器块的转发组件。 滤波器块可以获得第一硬件实现的滤波器,其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作,其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作,将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器,以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。 滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作,其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。

    METHODS AND APPARATUS RELATED TO A FLEXIBLE DATA CENTER SECURITY ARCHITECTURE
    27.
    发明申请
    METHODS AND APPARATUS RELATED TO A FLEXIBLE DATA CENTER SECURITY ARCHITECTURE 有权
    与灵活数据中心安全架构相关的方法和装置

    公开(公告)号:US20150163171A1

    公开(公告)日:2015-06-11

    申请号:US14621892

    申请日:2015-02-13

    Abstract: In one embodiment, edge devices can be configured to be coupled to a multi-stage switch fabric and peripheral processing devices. The edge devices and the multi-stage switch fabric can collectively define a single logical entity. A first edge device from the edge devices can be configured to be coupled to a first peripheral processing device from the peripheral processing devices. The second edge device from the edge devices can be configured to be coupled to a second peripheral processing device from the peripheral processing devices. The first edge device can be configured such that virtual resources including a first virtual resource can be defined at the first peripheral processing device. A network management module coupled to the edge devices and configured to provision the virtual resources such that the first virtual resource can be migrated from the first peripheral processing device to the second peripheral processing device.

    Abstract translation: 在一个实施例中,边缘设备可被配置为耦合到多级交换结构和外围处理设备。 边缘设备和多级交换结构可以共同定义单个逻辑实体。 来自边缘设备的第一边缘设备可以被配置为从外围处理设备耦合到第一外围处理设备。 来自边缘设备的第二边缘设备可以被配置为从外围处理设备耦合到第二外围处理设备。 第一边缘设备可以被配置为使得可以在第一外围处理设备处定义包括第一虚拟资源的虚拟资源。 网络管理模块,其耦合到所述边缘设备并且被配置为提供所述虚拟资源,使得所述第一虚拟资源可以从所述第一外围处理设备迁移到所述第二外围处理设备。

    Data structure-less distributed fabric multicast
    28.
    发明授权
    Data structure-less distributed fabric multicast 有权
    无数据结构的分布式组播

    公开(公告)号:US08873554B2

    公开(公告)日:2014-10-28

    申请号:US13692701

    申请日:2012-12-03

    CPC classification number: H04L12/18 H04L45/16 H04L49/10 H04L49/201

    Abstract: A network device receives a packet with a multicast nexthop identifier, and creates a mask that includes addresses of egress packet forwarding engines, of the network device, to which to provide the packet. The network device divides the mask into two portions, generates two copies of the packet, provides a first portion of the mask in a first copy of the packet, and provides a second portion of the mask in a second copy of the packet. The network device also forwards the first copy of the packet to an address of a first egress packet forwarding engine provided in the first portion of the mask, and forwards the second copy of the packet to an address of a second egress packet forwarding engine provided in the second portion of the mask.

    Abstract translation: 网络设备接收具有多播下一标识符的分组,并创建包括提供分组的网络设备的出站分组转发引擎的地址的掩码。 网络设备将掩码分成两部分,生成分组的两个副本,在分组的第一副本中提供该掩码的第一部分,并在分组的第二副本中提供该掩码的第二部分。 网络设备还将分组的第一副本转发到在掩码的第一部分中提供的第一出口分组转发引擎的地址,并将分组的第二副本转发到提供的第二出口分组转发引擎的地址 掩模的第二部分。

    METHODS AND APPARATUS FOR TRANSMISSION OF GROUPS OF CELLS VIA A SWITCH FABRIC
    29.
    发明申请
    METHODS AND APPARATUS FOR TRANSMISSION OF GROUPS OF CELLS VIA A SWITCH FABRIC 有权
    用于通过开关织物传输细胞群的方法和装置

    公开(公告)号:US20130121343A1

    公开(公告)日:2013-05-16

    申请号:US13692425

    申请日:2012-12-03

    CPC classification number: H04J3/00 H04L49/251 H04L49/254

    Abstract: In one embodiment, a method can include receiving at an egress schedule module a request to schedule transmission of a group of cells from an ingress queue through a switch fabric of a multi-stage switch. The ingress queue can be associated with an ingress stage of the multi-stage switch. The egress schedule module can be associated with an egress stage of the multi-stage switch. The method can also include determining, in response to the request, that an egress port at the egress stage of the multi-stage switch is available to transmit the group of cells from the multi-stage switch.

    Abstract translation: 在一个实施例中,一种方法可以包括在出口调度模块处接收通过多级交换机的交换结构调度来自进入队列的小区的传输的请求。 入站队列可以与多级交换机的进入级相关联。 出口调度模块可以与多级交换机的出口级相关联。 该方法还可以包括响应于该请求确定多级交换机的出口级的出口端口可用于从多级交换机发送该小区组。

Patent Agency Ranking