Protocol definition for software bridge failover
    51.
    发明授权
    Protocol definition for software bridge failover 失效
    软件桥故障转移的协议定义

    公开(公告)号:US07492704B2

    公开(公告)日:2009-02-17

    申请号:US11227033

    申请日:2005-09-15

    IPC分类号: H04J1/16

    CPC分类号: H04L12/462

    摘要: A method, data processing system, and computer usable code are provided for protocol definition for software bridge failover. In a first aspect of the present invention, a first software bridge determines the proper working operation of a physical adapter. Limbo packets are sent to a second software bridge alerting the second software bridge that the first software bridge is no longer bridging traffic responsive to the physical adapter failure in the first software bridge. The second software bridge receives the limbo packets, and, in response to receiving the limbo packets, asserts primary control and initiates bridging of traffic. In an alternative aspect of the present invention a first software bridge sends keep-alive packets. A second software bridge monitors the keep-alive packets from the first software bridge and, in response to a failure to detect the keep-alive packets from the first software bridge, the second software bridge initiates bridging of traffic.

    摘要翻译: 为软件桥故障转移的协议定义提供了一种方法,数据处理系统和计算机可用代码。 在本发明的第一方面,第一软件桥接器确定物理适配器的适当的工作操作。 Limbo数据包被发送到第二个软件桥接器,提醒第二个软件桥接器,第一个软件桥接器不再桥接响应于第一个软件桥中的物理适配器故障的流量。 第二个软件桥接收到limbo数据包,并且响应于接收到limbo数据包,断言主要控制并启动流量桥接。 在本发明的另一方面,第一软件桥发送保持活动分组。 第二个软件桥接器监视来自第一软件桥的保持活动分组,并且响应于检测到来自第一软件桥的保持活动分组的故障,第二软件桥启动流量桥接。

    Accessing data processing systems behind a NAT enabled network
    52.
    发明授权
    Accessing data processing systems behind a NAT enabled network 失效
    访问启用NAT的网络后面的数据处理系统

    公开(公告)号:US07478169B2

    公开(公告)日:2009-01-13

    申请号:US10687266

    申请日:2003-10-16

    IPC分类号: G06F15/16 G06F9/00

    摘要: A NAT data processing system is located behind a NAT enabled network with a NAT device as a gateway to the NAT enabled network. A client system located outside the NAT enabled network queries the NAT device for the address of the NAT data processing system located behind the NAT enabled network. The query is automatically routed through the NAT device to a DNS server. The DNS server returns an address for the NAT data processing system and source routing for the NAT device. The NAT device forwards the address and source routing to the client system. The client system sends packets to the NAT data processing system at the address with source routing through the NAT device, such that the NAT data processing system behind the NAT enabled network is directly accessed by the client system from outside the NAT enabled network.

    摘要翻译: NAT数据处理系统位于启用NAT的网络后面,NAT设备作为启用NAT的网络的网关。 位于NAT启用网络之外的客户端系统向NAT设备查询位于启用NAT的网络后面的NAT数据处理系统的地址。 该查询通过NAT设备自动路由到DNS服务器。 DNS服务器返回NAT数据处理系统的地址和NAT设备的源路由。 NAT设备将地址和源路由转发到客户端系统。 客户端系统通过NAT设备将数据包发送到具有源路由地址的NAT数据处理系统,使得NAT启用网络背后的NAT数据处理系统可以由NAT使能网络外部的客户端系统直接访问。

    Method and apparatus for a secure network install
    53.
    发明授权
    Method and apparatus for a secure network install 失效
    用于安全网络安装的方法和设备

    公开(公告)号:US07478147B2

    公开(公告)日:2009-01-13

    申请号:US11186668

    申请日:2005-07-21

    IPC分类号: G06F15/177 G06F9/445

    摘要: A method, an apparatus, and computer instructions are provided for a secure network install. One aspect of the present invention provides a proxy server within the same subnet of the client for performing a lookup of the boot image file and downloading the boot image file from a boot file server in a secure manner. The client in turn downloads the file from the proxy TFTP server. Another aspect of the present invention modifies the client remote boot code to include a secure boot file download discovery (SBDD) mode. The client starts the SBDD mode by sending a request for a boot image file to a subnet broadcast address and port, which is listened by a proxy TFTP server. The proxy TFTP server receives the client request and downloads the boot image file. The client in turn downloads the boot image file from the proxy TFTP server.

    摘要翻译: 提供了一种用于安全网络安装的方法,装置和计算机指令。 本发明的一个方面提供了一种在客户端的同一子网内的代理服务器,用于执行查找引导映像文件并以安全的方式从引导文件服务器下载引导映像文件。 客户端又从代理TFTP服务器下载文件。 本发明的另一方面修改客户端远程引导代码以包括安全引导文件下载发现(SBDD)模式。 客户端通过向子网广播地址和端口发送启动映像文件请求来启动SBDD模式,由代理TFTP服务器收听。 代理TFTP服务器接收客户端请求并下载引导映像文件。 客户端又从代理TFTP服务器下载启动映像文件。

    Tunneling IPv6 packets
    54.
    发明授权
    Tunneling IPv6 packets 失效
    隧道IPv6报文

    公开(公告)号:US07437470B2

    公开(公告)日:2008-10-14

    申请号:US10992380

    申请日:2004-11-18

    IPC分类号: G06F15/16

    摘要: Methods, systems, and products are provided for tunneling IPv6 packets. Embodiments include receiving, by an origin IPv6 border router from an origin IPv6 host, an IPv6 packet having an IPv6 destination address; receiving, by an origin IPv6 border router from an origin IPv6 host, an IPv4 address for a destination IPv6 border router retrieved from a data structure associating IPv6 destination addresses with IPv4 addresses for destination IPv6 border routers; encapsulating, by the origin IPv6 border router, the IPv6 packet in an IPv4 packet; and sending the encapsulated packet to a destination IPv6 border router at the IPv4 address. In many embodiments, encapsulating, by the origin IPv6 border router, the IPv6 packet in an IPv4 packet is carried out by adding an IPv4 header to the IPv6 packet.

    摘要翻译: 提供了IPv6隧道分组的方法,系统和产品。 实施例包括由原始IPv6主机从原始IPv6边界路由器接收具有IPv6目的地址的IPv6分组; 通过原始IPv6边界路由器从原始IPv6主机接收从将IPv6目的地址与目的地IPv6边界路由器的IPv4地址相关联的数据结构检索的目的地IPv6边界路由器的IPv4地址; 由原始IPv6边界路由器封装IPv6分组中的IPv6分组; 并将封装的分组发送到IPv4地址的目的IPv6边界路由器。 在许多实施例中,由IPv6 IPv6边界路由器封装IPv4分组中的IPv6分组,通过向IPv6分组添加IPv4报头来实现。

    Apparatus for enabling multi-tuple TCP sockets within a computer network
    55.
    发明授权
    Apparatus for enabling multi-tuple TCP sockets within a computer network 有权
    用于在计算机网络内启用多元组TCP套接字的装置

    公开(公告)号:US07248589B2

    公开(公告)日:2007-07-24

    申请号:US10455160

    申请日:2003-06-05

    IPC分类号: H04L12/28

    摘要: A method for enabling multi-tuple TCP sockets within a computer network is disclosed. All possible connection paths between a first computer and a second computer are initially determined. Then, tuple information of all the possible connection paths are stored in a respective socket of the first and second computers as multi-tuple information. Next, one of the possible connection paths is designated as a preferred path and the remaining possible connection paths are designated as alternate paths. Finally, data packets are transmitted via the preferred path after a TCP connection has been established between the first and second computers on the preferred path.

    摘要翻译: 公开了一种在计算机网络内启用多元组TCP套接字的方法。 初始确定第一计算机和第二计算机之间的所有可能的连接路径。 然后,所有可能的连接路径的元组信息作为多元组信息存储在第一和第二计算机的相应插座中。 接下来,可能的连接路径之一被指定为优选路径,并且剩余的可能的连接路径被指定为备选路径。 最后,在优选路径上的第一和第二计算机之间建立TCP连接之后,经由优选路径传输数据分组。

    Method for allowing multiple authorized applications to share the same port
    56.
    发明申请
    Method for allowing multiple authorized applications to share the same port 审中-公开
    允许多个授权应用程序共享相同端口的方法

    公开(公告)号:US20070136465A1

    公开(公告)日:2007-06-14

    申请号:US11301111

    申请日:2005-12-12

    IPC分类号: G06F15/173

    CPC分类号: H04L63/104

    摘要: In a method comprising an embodiment of the invention, an original application initially binds to a port, and selects or designates a confidential key, which usefully may be a conventional cookie. The invention also sets a socket option, referred to by way of example, as SO_SECURE_REUSEPORT. The confidential key, together with the port number, is then registered with the operating system of a host associated with the port. In order for another application to subsequently bind to the port, such application must provide the operating system with a key that is identical to the confidential key. In one useful embodiment of the invention, a first application binds a socket to a particular port associated with the host. A specified key is registered with the operating system, and a second application is allowed to bind to the particular port only if the second application can furnish the operating system with a key that matches the specified key.

    摘要翻译: 在包括本发明的实施例的方法中,原始应用程序最初绑定到端口,并且选择或指定可有可能是传统cookie的机密密钥。 本发明还将作为示例引用的套接字选项设置为SO_SECURE_REUSEPORT。 然后将密钥与端口号一起注册到与端口相关联的主机的操作系统。 为了使另一个应用程序随后绑定到端口,这样的应用程序必须向操作系统提供与机密密钥相同的密钥。 在本发明的一个有用的实施例中,第一应用将套接字绑定到与主机相关联的特定端口。 指定的密钥被注册到操作系统,并且仅当第二应用可以向操作系统提供与指定密钥匹配的密钥时,允许第二应用绑定到特定端口。

    Method and system for providing subgroup conversation during a teleconference
    57.
    发明授权
    Method and system for providing subgroup conversation during a teleconference 有权
    在电话会议期间提供小组对话的方法和系统

    公开(公告)号:US07149298B2

    公开(公告)日:2006-12-12

    申请号:US10865701

    申请日:2004-06-10

    IPC分类号: H04M3/42

    摘要: A method and system for providing subgroup conversation during a teleconference enables side conversations during a virtual meeting. A passcode is used by parties to join the subgroup conversation, so that privacy of the subgroup is maintained. Alternatively, an administrator may set up subgroups and either join or invite members, who may toggle between the main teleconference and a subgroup teleconference using a standardized user input. The system may be implemented in any telephone network and across telephone networks such as public switched telephone networks (PSTNs), wireless networks, voice over Internet protocol networks and/or private branch exchanges (PBXs).

    摘要翻译: 在电话会议期间提供小组对话的方法和系统在虚拟会议期间能够进行侧对话。 各方使用密码加入子组会话,以保持子组的隐私。 或者,管理员可以设置子组并加入或邀请成员,他们可以使用标准化的用户输入在主电话会议和子组电话会议之间切换。 该系统可以在任何电话网络中以及诸如公共交换电话网(PSTN),无线网络,因特网协议网络语音和/或专用分支交换机(PBX)之类的电话网络上实现。

    Method, system and article for advance lease negotiation in DHCP
    59.
    发明申请
    Method, system and article for advance lease negotiation in DHCP 审中-公开
    在DHCP中预先租赁协商的方法,系统和文章

    公开(公告)号:US20060155563A1

    公开(公告)日:2006-07-13

    申请号:US11034274

    申请日:2005-01-12

    IPC分类号: G06Q99/00

    摘要: DHCP lease negotiation is performed in advance of a specified time when the IP address is needed. The client sends a DHCP discover message with an advance lease option indicating a future time when an IP address is needed. The DHCP server reserves an IP address available at the requested time for the requesting client and sends a DHCP acknowledgment of the reservation. Thereafter, the client sends a DHCP discover message requesting the reserved IP address, and the DHCP server assigns it to the client at the scheduled time.

    摘要翻译: 在需要IP地址的指定时间之前执行DHCP租约协商。 客户端发送具有预先租赁选项的DHCP发现消息,指示需要IP地址的未来时间。 DHCP服务器在请求的客户端请求的时间保留可用的IP地址,并发送预留的DHCP确认。 此后,客户端发送请求保留的IP地址的DHCP发现消息,DHCP服务器在预定的时间将其分配给客户端。

    Communication protocol for virtual input/output server (VIOS) cluster communication
    60.
    发明授权
    Communication protocol for virtual input/output server (VIOS) cluster communication 有权
    用于虚拟输入/输出服务器(VIOS)群集通信的通信协议

    公开(公告)号:US09100443B2

    公开(公告)日:2015-08-04

    申请号:US13004184

    申请日:2011-01-11

    CPC分类号: H04L69/22 H04L67/1097

    摘要: A first Virtual Input/Output Server (VIOS) of a VIOS cluster performs the functions of: generating, at a sending daemon of the first VIOS, a send message that is to be transmitted to a receiving daemon at a second VIOS; in response to completion of the generating of the send message, forwarding the send message to a sending virtual small computer systems interface (vscsi) kernel extension (VKE) via a system call interface; and in response to the sending VKE receiving the send message from the sending daemon, forwarding the send message to one or more second VIOSes within the VIOS cluster utilizing a kcluster interface. The sending VKE parses at least one of a message header and a sub-header of the send message; and responsive to detection of a broadcast setting for the send message, the VKE forwards the send message to all nodes within the cluster via a cluster broadcast.

    摘要翻译: VIOS集群的第一个虚拟输入/输出服务器(VIOS)执行以下功能:在第一个VIOS的发送守护进程处生成要在第二个VIOS上发送到接收守护进程的发送消息; 响应于完成发送消息的生成,经由系统调用接口将发送消息转发到发送虚拟小型计算机系统接口(vscsi)内核扩展(VKE); 并且响应于发送VKE从发送守护进程发送发送消息,使用k集群接口将发送消息转发到VIOS集群内的一个或多个第二VIOS。 发送VKE解析发送消息的消息报头和子报头中的至少一个; 并且响应于发送消息的广播设置的检测,VKE经由群集广播将发送消息转发到群集内的所有节点。