System and method for protecting resources using network devices

    公开(公告)号:US11044197B2

    公开(公告)日:2021-06-22

    申请号:US16511898

    申请日:2019-07-15

    Abstract: In general, embodiments of the invention relate to processing network traffic data units (NTDUs). More specifically, embodiments of the invention relate to processing NTDUs transmitted between client device and the one or more protected resources. The protected resources are logically surrounded by a perimeter, which is implemented as a set of network devices that manage the flow of NTDUs between client devices and the protected resources. The perimeter works in conjunction with a set of filtering devices to determine whether a given NTDU can ultimately be transmitted to, and processed by, a protected resource.

    METHOD AND SYSTEM FOR SIDELINING OF A NETWORK DEVICE

    公开(公告)号:US20200106640A1

    公开(公告)日:2020-04-02

    申请号:US16363137

    申请日:2019-03-25

    Abstract: Embodiments of the invention may relate to methods, systems, and/or non-transitory computer readable mediums for sidelining Such sidelining may include making a first determination, by a first network device, that a first network device state has degraded and making a first request, based on the first determination, to receive a first sideline token from a network controller. The network controller, in response to the first request, may make a second determination that a remaining sideline token is available. The method may also include receiving, by the first network device and based on the second determination, the remaining sideline token from the network controller and initiating, by the first network device, a graceful offlining based on receiving the remaining sideline token.

    METHOD AND SYSTEM FOR VXLAN ENCAPSULATION OFFLOAD

    公开(公告)号:US20170359199A9

    公开(公告)日:2017-12-14

    申请号:US15335993

    申请日:2016-10-27

    CPC classification number: H04L12/4645 H04L12/4633 H04L12/4641 H04L49/354

    Abstract: A method for virtual extensible local area network (VXLAN) encapsulation. The method includes receiving a first augmented MAC frame on a first ingress port of a first network device, where the first augmented MAC frame includes a first egress port ID (EPID), a first ingress port ID (IPID), and a first MAC frame. The method further includes identifying a first destination VXLAN tunnel endpoint (VTEP) internet protocol (IP) address based on the first EPID, where the first destination VTEP IP address is associated with a first destination VTEP. The method further includes identifying a source VTEP IP address based on the first IPID, performing VXLAN encapsulation of the first MAC frame to obtain a VXLAN frame, and sending the VXLAN frame to the first destination VTEP via a first egress port of the first network device.

    SYSTEM AND METHOD FOR SHARING VXLAN TABLE INFORMATION WITH A NETWORK CONTROLLER
    49.
    发明申请
    SYSTEM AND METHOD FOR SHARING VXLAN TABLE INFORMATION WITH A NETWORK CONTROLLER 有权
    用网络控制器共享VXLAN表信息的系统和方法

    公开(公告)号:US20150058470A1

    公开(公告)日:2015-02-26

    申请号:US13971210

    申请日:2013-08-20

    CPC classification number: H04L61/103 H04L12/4633 H04L12/4641 H04L61/6009

    Abstract: A method and system for sharing host entries between virtual tunnel endpoints (VTEPs). The method includes making a first determination that an NLHE is present in a locally learned host entry table on a VTEP where the NHLE is associated with a first timestamp, and making a second determination that a first entry corresponding to the NHLE is present in a Host-Specific Portion of Global Host Entry Table (HSPT) on the VTEP, where the first entry is associated with a second timestamp. Based on the second determination, making a third determination, using the timestamps, that the NHLE is more recent than the first entry and based on the third determination updating an active forwarding table on the first VTEP to include a second entry corresponding to the NHLE and to remove the first entry and sending the NHLE to a VXLAN controller operatively connected to the VTEP.

    Abstract translation: 一种用于在虚拟隧道端点(VTEP)之间共享主机条目的方法和系统。 该方法包括首先确定NLHE存在于VTEP上的本地学习的主机条目表中,其中NHLE与第一时间戳相关联,并且进行第二确定,与NHLE相对应的第一条目存在于主机 - VTEP上的全局主机条目表(HSPT)的特定部分,其中第一个条目与第二个时间戳相关联。 基于所述第二确定,使用所述时间戳来确定所述NHLE比所述第一条目更新,并且基于所述第三确定来更新所述第一VTEP上的活动转发表以包括对应于所述NHLE的第二条目,以及 删除第一个条目并将NHLE发送到可操作地连接到VTEP的VXLAN控制器。

    SYSTEM AND METHOD FOR DEVICE FAILURE NOTIFICATION
    50.
    发明申请
    SYSTEM AND METHOD FOR DEVICE FAILURE NOTIFICATION 有权
    用于设备故障通知的系统和方法

    公开(公告)号:US20140280792A1

    公开(公告)日:2014-09-18

    申请号:US13893243

    申请日:2013-05-13

    CPC classification number: H04L67/28 H04L41/0654 H04L67/2861 H04L69/40

    Abstract: A method and apparatus of a device that notifies another device of a failed device is described. In an exemplary embodiment, a network element detects that a first device is unavailable, where the network element couples the first device to the second device. In response to detecting that the first device is unavailable, the network element configures a proxy for the first device. The network element additionally receives network data that is destined for the first device, where the second device originated the network data. If the proxy can process the network data, the network element transmits a response to the second device from the proxy, where the response indicates that the first device is unavailable, where the first response includes an address of the first device. If the proxy cannot process the network data, the network element drops the network data.

    Abstract translation: 描述了通知另一设备故障设备的设备的方法和设备。 在示例性实施例中,网络元件检测到第一设备不可用,其中网络元件将第一设备耦合到第二设备。 响应于检测到第一设备不可用,网络元件为第一设备配置代理。 网络元件另外接收目的地为第一设备的网络数据,其中第二设备发起网络数据。 如果代理可以处理网络数据,则网络单元从代理发送对第二设备的响应,其中响应指示第一设备不可用,其中第一响应包括第一设备的地址。 如果代理无法处理网络数据,则网元丢弃网络数据。

Patent Agency Ranking