Programming a data network device using user defined scripts

    公开(公告)号:US09986061B2

    公开(公告)日:2018-05-29

    申请号:US14295265

    申请日:2014-06-03

    IPC分类号: G06F15/16 H04L12/26 H04L29/08

    CPC分类号: H04L67/322 H04L67/141

    摘要: Exemplary embodiments for programming a network device using user-defined scripts are disclosed. The systems and methods provide for a servicing node to receive a request for a network session between a client device and a server, receive a user defined class and a user defined object configuration from a node controller, and use the information to instruct an object virtual machine to generate at least one user defined object. The servicing node can then apply the at least one user defined object to a data packet of the network session, where the user defined object allows a user to configure the network device with user-defined instruction scripts.

    DISTRIBUTED SYSTEM TO DETERMINE A SERVER'S HEALTH

    公开(公告)号:US20180123926A1

    公开(公告)日:2018-05-03

    申请号:US15858163

    申请日:2017-12-29

    IPC分类号: H04L12/26

    摘要: Exemplary embodiments for a distributed system for determining a server's health are disclosed. The systems and methods provide for a network controller to direct one or more servicing nodes to check the health of one or more servers, and report a health score to the network controller. The network controller may then calculate, update and maintain a health score for each server in the network from the various health scores reported to it from the servicing nodes. This allows a distributed system to be used to facilitate network operations, as a single device is not relied on for periodically determining each server's health.

    Processing Packet Header with Hardware Assistance

    公开(公告)号:US20170187631A1

    公开(公告)日:2017-06-29

    申请号:US15457043

    申请日:2017-03-13

    摘要: In processing data packet headers, a packet pre-processor is configured with at least one predetermined header field identifier. The packet pre-processor detects at least one header field identifier in a header field of a data packet received over a communication session between a host and a server, matches the predetermined header field identifier to the header field identifier in the data packet, generates a header report block comprising information corresponding to the header field identifier in the data packet, and sends the data packet and the header report block to a processor module for processing the data packet based on the header report block. The processor module receives the data packet and the header report block from the packet pre-processor, retrieves a service policy using the header report block, applies the service policy to the data packet, and sends the data packet to the host or the server.

    Combining Stateless and Stateful Server Load Balancing
    36.
    发明申请
    Combining Stateless and Stateful Server Load Balancing 有权
    结合无状态和有状态的服务器负载平衡

    公开(公告)号:US20160156708A1

    公开(公告)日:2016-06-02

    申请号:US15016097

    申请日:2016-02-04

    IPC分类号: H04L29/08 H04L12/66

    摘要: The processing of data packets sent over a communication session between a host and a server by a service gateway includes processing a data packet using a current hybrid-stateful or hybrid-stateless processing method. The processing then checks whether a hybrid-stateless or hybrid-stateful condition is satisfied. When one of the sets of conditions is satisfied, the process includes changing from a hybrid-stateful to a hybrid-stateless processing method, or vice versa, for a subsequently received data packet. If the conditions are not satisfied, the process continues as originally structured.

    摘要翻译: 通过服务网关通过主机和服务器之间的通信会话发送的数据分组的处理包括使用当前混合状态或混合无状态处理方法处理数据分组。 然后,处理检查是否满足混合无状态或混合状态条件。 当满足条件集合中的一个时,该过程包括从混合状态到混合无状态处理方法,反之亦然,对于随后接收的数据分组。 如果条件不满足,则该过程将按原来的结构继续进行。

    Combining stateless and stateful server load balancing
    37.
    发明授权
    Combining stateless and stateful server load balancing 有权
    结合无状态和有状态的服务器负载平衡

    公开(公告)号:US09270774B2

    公开(公告)日:2016-02-23

    申请号:US14520126

    申请日:2014-10-21

    IPC分类号: H04L12/66 H04L29/08

    摘要: The processing of data packets sent over a communication session between a host and a server by a service gateway includes processing a data packet using a current hybrid-stateful or hybrid-stateless processing method. The processing then checks whether a hybrid-stateless or hybrid-stateful condition is satisfied. When one of the sets of conditions is satisfied, the process includes changing from a hybrid-stateful to a hybrid-stateless processing method, or vice versa, for a subsequently received data packet. If the conditions are not satisfied, the process continues as originally structured.

    摘要翻译: 通过服务网关通过主机和服务器之间的通信会话发送的数据分组的处理包括使用当前混合状态或混合无状态处理方法处理数据分组。 然后,处理检查是否满足混合无状态或混合状态条件。 当满足条件集合中的一个时,该过程包括从混合状态到混合无状态处理方法,反之亦然,对于随后接收的数据分组。 如果条件不满足,则该过程将按原来的结构继续进行。

    FACILITATING SECURE NETWORK TRAFFIC BY AN APPLICATION DELIVERY CONTROLLER
    38.
    发明申请
    FACILITATING SECURE NETWORK TRAFFIC BY AN APPLICATION DELIVERY CONTROLLER 审中-公开
    通过应用交付控制器实现安全网络交通

    公开(公告)号:US20140330982A1

    公开(公告)日:2014-11-06

    申请号:US14268914

    申请日:2014-05-02

    IPC分类号: H04L29/06

    摘要: Facilitation of secure network traffic by an application delivery controller is provided herein. In some examples, a method includes: (a) receiving a data packet with information from a client indicating that the client is a trusted source; (b) embedding in the data packet a transmission control protocol (TCP) options header, the TCP options header comprising information including at least a sequence number for a protocol connection; and (c) forwarding the embedded data packet to a server.

    摘要翻译: 本文提供了由应用传送控制器促进安全网络流量。 在一些示例中,一种方法包括:(a)从客户端接收指示客户端是可信源的信息的数据分组; (b)在数据分组中嵌入传输控制协议(TCP)选项报头,所述TCP选项报头包括至少包括用于协议连接的序列号的信息; 和(c)将嵌入的数据分组转发到服务器。

    Transmission control of protocol state exchange for dynamic stateful service insertion

    公开(公告)号:US11115481B2

    公开(公告)日:2021-09-07

    申请号:US16805881

    申请日:2020-03-02

    IPC分类号: H04L29/08 H04L29/06

    摘要: Provided are methods and systems for a Transmission Control Protocol (TCP) state handoff of a data traffic flow. A method for a TCP state handoff of a data traffic flow comprises determining a TCP state at predetermined times by a state machine unit. The TCP state includes data concerning a session between a client and a server. The TCP state for the predetermined times is stored to a database. A request to apply a predetermined policy to the session is received by a transaction processing unit and, in response to the request, a session request associated with the session between the client and the server is sent to an access control unit. The session request is processed by the access control unit based on the TCP state and according to the predetermined policy.

    Distributing service sessions
    40.
    发明授权

    公开(公告)号:US10862955B2

    公开(公告)日:2020-12-08

    申请号:US16004265

    申请日:2018-06-08

    IPC分类号: H04L29/08 H04L12/725

    摘要: Provided are methods and systems for dynamically distributing a service session from a client device. The method may commence with receiving a packet associated with the service session from the client device by a gateway node. The method may include determining that the packet matches a service address in a forwarding policy. The method may continue with selecting one of a plurality of forwarding nodes for sending the packet to the one of the plurality of forwarding nodes. The method may include receiving the packet of the service session by the one of the plurality of forwarding nodes. The method may continue with determining that the packet matches the service address serviced by a servicing node of a plurality of servicing nodes. The method may further include sending the packet to the servicing node for forwarding the packet to a server by the servicing node.