PACKET FILTERTING BY APPLYING FILTER RULES TO A PACKET BYTESTREAM
    51.
    发明申请
    PACKET FILTERTING BY APPLYING FILTER RULES TO A PACKET BYTESTREAM 有权
    通过将过滤规则应用于包装字节来进行包装过滤

    公开(公告)号:US20090034519A1

    公开(公告)日:2009-02-05

    申请号:US11832234

    申请日:2007-08-01

    申请人: Vivek Kashyap

    发明人: Vivek Kashyap

    IPC分类号: H04L12/56

    摘要: A packet filtering method, system and article of manufacture are provided which include: employing an instruction set associated with a pseudo-machine in filtering packets received at a network interface card coupled to a host, wherein a set of instructions of the instruction set implements at least one byte-defined filter rule; and the employing includes for a packet of the received packets, processing bytes of the packet as a bytestream and applying at least one filter rule to the bytestream to filter the packet. The applying can be performed in any one of a plurality of locations without customization of the instruction set, including the network interface card and the host processor coupled thereto.

    摘要翻译: 提供了一种包过滤方法,系统和制品,包括:采用与伪机相关联的指令集来过滤在与主机耦合的网络接口卡处接收到的分组,其中指令集的指令集在 至少一个字节定义的过滤规则; 并且所述应用包括对于所接收的分组的分组,处理所述分组的字节作为副流分析,并且对所述副流分析应用至少一个过滤规则以过滤所述分组。 可以在多个位置中的任何一个位置执行应用,而无需定制指令集,包括网络接口卡和与其耦合的主机处理器。

    Network node failover using multicast address or port
    52.
    发明授权
    Network node failover using multicast address or port 失效
    使用组播地址或端口进行网络节点故障切换

    公开(公告)号:US06944786B2

    公开(公告)日:2005-09-13

    申请号:US09917464

    申请日:2001-07-27

    申请人: Vivek Kashyap

    发明人: Vivek Kashyap

    摘要: The failover of nodes within networks, using a multicast address or a multicast port, is disclosed. A first node of a network joins a multicast group having a multicast address, which is assigned to the first node. Communication to the first node is achieved via communication to the multicast address, and/or through a multicast port on a switch of the network mapping to a port on the first node. When the first node fails, one of two actions occurs. First, a second node of the network may join the multicast group, such that the multicast address is assigned to the second node, and the second node handles communication to the multicast address. Second, the multicast port on the switch may be remapped to a port on the second node, so that communication to the multicast address is directed to the port on the second node.

    摘要翻译: 公开了使用组播地址或组播端口的网络内节点的故障切换。 网络的第一节点加入具有分配给第一节点的多播地址的多播组。 通过与多播地址的通信和/或通过映射到第一节点上的端口的网络交换机上的多播端口来实现到第一节点的通信。 当第一个节点出现故障时,会发生两个动作之一。 首先,网络的第二节点可以加入组播组,使得组播地址被分配给第二节点,第二节点处理与组播地址的通信。 第二,交换机上的组播端口可能会被重新映射到第二个节点上的一个端口,使得与组播地址的通信被定向到第二个节点上的端口。

    Multicast group management in infiniband
    53.
    发明申请
    Multicast group management in infiniband 失效
    Infiniband中的组播组管理

    公开(公告)号:US20050027801A1

    公开(公告)日:2005-02-03

    申请号:US10631053

    申请日:2003-07-31

    IPC分类号: H04L12/18 G06F15/16

    CPC分类号: H04L12/185

    摘要: A mechanism for managing multicast groups with send-without-receive (SWR) joiners without the use of traps on creation and deletion of groups is provided. Group information is maintained continuously while the SWR member exists. When an SWR join is attempted and the group does not already exist, the group information (MLID) is marked as used and the first switch to which the SWR packets are sent is routed to discard all packets sent to the group. When receiving members join the group, the routing is updated so that the SWR member begins sending to the receiving members. When the last receiving member leaves the group, the first switch is again routed to discard the packets.

    摘要翻译: 提供了一种用于在不创建和删除组的情况下使用发送无接收(SWR)加入者来管理多播组的机制。 组织信息在SWR成员存在时连续维护。 当尝试SWR加入并且该组不存在时,组信息(MLID)被标记为使用,并且发送SWR分组的第一交换机被路由以丢弃发送到该组的所有分组。 当接收成员加入组时,更新路由,以便SWR成员开始向接收成员发送。 当最后一个接收成员离开组时,第一个交换机再次被路由丢弃该数据包。

    Alternate use of data packet fields to convey information
    54.
    发明授权
    Alternate use of data packet fields to convey information 有权
    交替使用数据包字段来传达信息

    公开(公告)号:US06438128B1

    公开(公告)日:2002-08-20

    申请号:US09850850

    申请日:2001-05-08

    申请人: Vivek Kashyap

    发明人: Vivek Kashyap

    IPC分类号: H04L1228

    CPC分类号: H04L29/06 H04L69/22

    摘要: The alternate use of data packet fields to convey other packet information is disclosed. A data packet is sent by a first adapter, such as a host channel adapter (HCA), to a second adapter, such as a target channel adapter (TCA), over a network, such as input/output (I/O) network like an InfiniBand I/O network. The packet is sent for routing over another network, such as a communication network like an Ethernet network. The packet has a first part intended to signify a packet type, but actually conveys other packet information. The first part may be intended to have a value greater than or equal to a predetermined number to signify the type, but actually have a value less than the predetermined number to convey other packet information. The first packet part may be a raw datagram header, and may have an Ethertype field.

    摘要翻译: 公开了数据分组字段的另外使用来传送其他分组信息。 数据包由第一适配器(例如主机通道适配器(HCA))通过诸如输入/输出(I / O)网络的网络发送到诸如目标通道适配器(TCA)的第二适配器 像InfiniBand I / O网络。 该分组被发送用于通过另一网络进行路由,例如像以太网的通信网络。 分组具有旨在表示分组类型的第一部分,但实际上传达其他分组信息。 第一部分可以旨在具有大于或等于预定数量的值来表示该类型,但实际上具有小于预定数量的值来传达其他分组信息。 第一分组部分可以是原始数据报头,并且可以具有以太网类型字段。

    Method and system for delivering and executing virtual container on logical partition of target computing device
    55.
    发明授权
    Method and system for delivering and executing virtual container on logical partition of target computing device 失效
    用于在目标计算设备的逻辑分区上传送和执行虚拟容器的方法和系统

    公开(公告)号:US08713566B2

    公开(公告)日:2014-04-29

    申请号:US13017420

    申请日:2011-01-31

    IPC分类号: G06F9/455 G06F9/46

    摘要: A virtual container includes an application computer program and metadata representing the operating system requirements. The virtual container is stored on a computer-readable storage medium for delivery to an end user for copying to a target computing device. The virtual container is equivalent to a virtual appliance minus an operating system. The virtual container is executable on an existing logical partition (LPAR) of the target computing device that provides a virtual operating system for the application of the virtual container, where the virtual container is specifically executable within a workload partition (WPAR) of the LPAR. The virtual container is also executable on a new LPAR of the target computing device, where the end user provides a guest operating system to run within the new partition for the virtual container, such that addition of the guest operating system to the virtual container renders the virtual container as a virtual appliance.

    摘要翻译: 虚拟容器包括应用程序计算机程序和表示操作系统要求的元数据。 虚拟容器被存储在计算机可读存储介质上,用于递送到终端用户以复制到目标计算设备。 虚拟容器相当于虚拟设备减去操作系统。 虚拟容器可以在目标计算设备的现有逻辑分区(LPAR)上执行,该逻辑分区(LPAR)为虚拟容器的应用程序提供虚拟操作系统,虚拟容器在LPAR的工作负载分区(WPAR)内可以专门地执行。 虚拟容器还可以在目标计算设备的新LPAR上执行,其中最终用户提供客户机操作系统以在虚拟容器的新分区内运行,使得向虚拟容器添加客户机操作系统使得 虚拟容器作为虚拟设备。

    Converting two-tier resource mapping to one-tier resource mapping
    56.
    发明授权
    Converting two-tier resource mapping to one-tier resource mapping 有权
    将两层资源映射转换为单层资源映射

    公开(公告)号:US08577848B2

    公开(公告)日:2013-11-05

    申请号:US13561984

    申请日:2012-07-30

    IPC分类号: G06F7/00

    摘要: Converting a two-tier resource mapping to a one-tier resource mapping may include determining a first mapping from an intermediate data buffer to a data destination. A second mapping from a data source to the intermediate data buffer may also be determined. An optimized mapping from the data source to the data destination may be generated based on the first and second mappings. The optimized mapping may then be used instead of the first and second mappings to collect data from the data source to the data destination, thereby resulting in a one-tier resource mapping. In some instances, the mappings may be sets of one or more queries.

    摘要翻译: 将两层资源映射转换为单层资源映射可以包括确定从中间数据缓冲器到数据目的地的第一映射。 还可以确定从数据源到中间数据缓冲器的第二映射。 可以基于第一和第二映射来生成从数据源到数据目的地的优化映射。 然后可以使用优化的映射而不是第一和第二映射来将数据从数据源收集到数据目的地,从而导致一层资源映射。 在某些情况下,映射可以是一个或多个查询的集合。

    Multiple-node system power utilization management
    57.
    发明授权
    Multiple-node system power utilization management 有权
    多节点系统功率利用管理

    公开(公告)号:US08375228B2

    公开(公告)日:2013-02-12

    申请号:US12187231

    申请日:2008-08-06

    申请人: Vivek Kashyap

    发明人: Vivek Kashyap

    IPC分类号: G02B6/12

    摘要: A multiple-node system having a number of nodes has its power utilization managed. A node power cap of a node specifies a maximum power that the node is individually able to utilize. A system-wide power cap specifies a maximum power that the multiple-node system is able to utilize overall. In response to determining that a node power cap of a selected node is to be increased, where a total of the node power caps of all the nodes is equal to the system-wide power cap, the node power caps of one or more nodes are reduced so that the total of the node power caps of all the nodes is less than the system-wide power cap. The node power cap of the selected node is then increased such that the total of the node power caps of all the nodes is equal to or less than the system-wide power cap.

    摘要翻译: 具有多个节点的多节点系统具有管理其功率利用率。 节点的节点功率上限指定节点能够单独使用的最大功率。 系统范围的功率上限指定了多节点系统能够整体使用的最大功率。 响应于确定所选节点的节点功率上限将被增加,其中所有节点的总节点功率大小等于系统范围的功率上限,一个或多个节点的节点功率大小为 减少所有节点的节点功率大小的总和小于系统范围的功率上限。 然后增加所选节点的节点功率上限,使得所有节点的节点功率大小的总和等于或小于系统范围的功率上限。

    DYNAMICALLY DEFINING RULES FOR NETWORK ACCESS
    59.
    发明申请
    DYNAMICALLY DEFINING RULES FOR NETWORK ACCESS 有权
    动态定义网络访问规则

    公开(公告)号:US20120317611A1

    公开(公告)日:2012-12-13

    申请号:US13450433

    申请日:2012-04-18

    申请人: Vivek Kashyap

    发明人: Vivek Kashyap

    IPC分类号: G06F21/00 G06F15/173

    摘要: Methods are provided for dynamically defining network access control rules. A placeholder for a parameter of an interface to an endpoint such as a data processing system or virtual machine may be provided in a network access control rule, instead of a static parameter. The parameter may be dynamically determined, by a firewall or a hypervisor for example, and the placeholder may be replaced with the dynamically determined parameter.

    摘要翻译: 提供了动态定义网络访问控制规则的方法。 可以在网络访问控制规则中提供用于诸如数据处理系统或虚拟机的端点的接口的参数的占位符,而不是静态参数。 该参数可以由防火墙或管理程序例如动态地确定,并且占位符可以被动态确定的参数替换。

    Virtual Container
    60.
    发明申请
    Virtual Container 失效
    虚拟容器

    公开(公告)号:US20120198442A1

    公开(公告)日:2012-08-02

    申请号:US13017420

    申请日:2011-01-31

    IPC分类号: G06F9/455

    摘要: A virtual container includes an application computer program and metadata representing the operating system requirements. The virtual container is stored on a computer-readable storage medium for delivery to an end user for copying to a target computing device. The virtual container is equivalent to a virtual appliance minus an operating system. The virtual container is executable on an existing logical partition (LPAR) of the target computing device that provides a virtual operating system for the application of the virtual container, where the virtual container is specifically executable within a workload partition (WPAR) of the LPAR. The virtual container is also executable on a new LPAR of the target computing device, where the end user provides a guest operating system to run within the new partition for the virtual container, such that addition of the guest operating system to the virtual container renders the virtual container as a virtual appliance.

    摘要翻译: 虚拟容器包括应用程序计算机程序和表示操作系统要求的元数据。 虚拟容器被存储在计算机可读存储介质上,用于递送到终端用户以复制到目标计算设备。 虚拟容器相当于虚拟设备减去操作系统。 虚拟容器可以在目标计算设备的现有逻辑分区(LPAR)上执行,该逻辑分区(LPAR)为虚拟容器的应用程序提供虚拟操作系统,虚拟容器在LPAR的工作负载分区(WPAR)内可以专门地执行。 虚拟容器还可以在目标计算设备的新LPAR上执行,其中最终用户提供客户机操作系统以在虚拟容器的新分区内运行,使得向虚拟容器添加客户机操作系统使得 虚拟容器作为虚拟设备。