公开(公告)号：US10264079B2

公开(公告)日：2019-04-16

申请号：US15157621

申请日：2016-05-18

Applicant: Cisco Technology, Inc.

Inventor： Manish Pathak ,  Venkatesh N. Gautam ,  Jianxin Wang

IPC: G06F13/00 ,  H04L29/08 ,  H04L29/06

Abstract: A handshake procedure to establish a first connection between a client and a server is monitored at an intermediate network device. A request message sent to the server from the client is received at the intermediate network device. The request message includes parameters defining a manner of receiving information from the server. The parameters defining the manner of receiving information from the server are modified to produce modified parameters. A redirect message is sent from the intermediate network device to the client to induce or cause the client to establish a second connection with the server based upon the modified parameters, wherein the redirect message contains the modified parameters.

公开(公告)号：US20180295053A1

公开(公告)日：2018-10-11

申请号：US15483534

申请日：2017-04-10

Applicant: Cisco Technology, Inc.

Inventor： Kent Leung ,  Jianxin Wang

IPC: H04L12/721 ,  H04L12/851 ,  H04L12/741 ,  H04L29/08

CPC classification number: H04L45/38 ,  H04L43/026 ,  H04L45/745 ,  H04L47/2483 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/2521 ,  H04L67/2861

Abstract: An extended service-function chain (SFC) proxy is hosted on a network node and connected to a service path formed by one or more network nodes hosting a chain of service-functions applied to packets traversing the service path. The packets each include a service header having a service path identifier and a service index. A packet of a traffic flow destined for a service-function is received from the service path and sent to the service-function. An indication to offload the traffic flow is received from the service-function. The indication is stored in a flow table having entries each identifying a respective traffic flow. A subsequent packet of the traffic flow is received from the service path. The flow table is searched for the indication to offload the traffic flow. Upon finding the indication, the service-function is bypassed, and the subsequent packet is forwarded along the service path.

公开(公告)号：US09124628B2

公开(公告)日：2015-09-01

申请号：US13623127

申请日：2012-09-20

Applicant: Cisco Technology, Inc.

Inventor： Hari Shankar ,  Jianxin Wang ,  Daryl Odnert ,  Manju Radhakrishnan ,  Andrew E. Ossipov

IPC: G06F15/16 ,  H04L29/06

CPC classification number: H04L63/166

Abstract: Techniques are presented for seamless engagement and disengagement of Transport Layer Security proxy services. A first initial message of a handshaking procedure for a first secure communication session between a first device and a second device is intercepted at a proxy device. The first initial message of the handshaking procedure is saved at the proxy device. A second initial message of a second handshaking procedure for a second secure communication session between the proxy device and the second device is sent from the proxy device to the second device. It is determined from the second handshaking procedure that inspection of the first secure communication session is not to be performed by the proxy device. The first secure communication session is established without examination of the communication traffic by the proxy device.

Abstract translation: 介绍了传输层安全代理服务的无缝接合和脱离接口的技术。 在代理设备处拦截用于第一设备和第二设备之间的第一安全通信会话的握手过程的第一初始消息。 握手过程的第一个初始消息保存在代理设备中。 用于代理设备和第二设备之间的第二安全通信会话的第二握手过程的第二初始消息被从代理设备发送到第二设备。 从第二握手程序确定第一安全通信会话的检查不被代理设备执行。 建立第一安全通信会话而不检查代理设备的通信流量。