公开(公告)号：US07631182B1

公开(公告)日：2009-12-08

申请号：US11165990

申请日：2005-06-24

申请人： Nicolas G. Droux ,  Sunay Tripathi ,  Hsiao-Keng Jerry Chu

发明人： Nicolas G. Droux ,  Sunay Tripathi ,  Hsiao-Keng Jerry Chu

IPC分类号： H04L29/06

CPC分类号： H04L63/06 ,  H04L63/166

摘要： A method for offloading a secure protocol handshake. The method includes establishing a connection between a host system and a remote peer, and determining whether the secure protocol handshake is offloaded to a network interface card (NIC). When the secure protocol handshake is offloaded to the NIC, an offload request is sent to offload the secure protocol handshake, where the offload request includes a value of at least one cryptographic key. The method further includes performing cryptographic operations associated with the secure protocol handshake using the value of at least one cryptographic key to obtain at least one secret key, and returning a status of the secure protocol handshake to the host system.

摘要翻译： 一种卸载安全协议握手的方法。 该方法包括建立主机系统和远程对等体之间的连接，以及确定安全协议握手是否被卸载到网络接口卡（NIC）。 当安全协议握手被卸载到NIC时，发送卸载请求以卸载安全协议握手，其中卸载请求包括至少一个加密密钥的值。 该方法还包括使用至少一个加密密钥的值来执行与安全协议握手相关联的加密操作，以获得至少一个秘密密钥，以及将安全协议握手的状态返回给主机系统。

公开(公告)号：US20090238189A1

公开(公告)日：2009-09-24

申请号：US12053666

申请日：2008-03-24

申请人： Sunay Tripathi ,  Erik Nordmark ,  Nicolas G. Droux

发明人： Sunay Tripathi ,  Erik Nordmark ,  Nicolas G. Droux

IPC分类号： H04L12/56

CPC分类号： H04L45/00 ,  H04L45/741 ,  H04L45/742

摘要： A system includes a physical NIC associated with the computer and including receive rings for storing network traffic addressed to the VNIC, where the receive rings include a local receive ring for storing local traffic and a forwarding receive ring for storing forwarding traffic. The physical NIC further includes a hardware classifier configured to register a local Internet Protocol (IP) address associated with the VNIC in a lookup table, receive a packet including a destination IP address, classify the packet as local traffic or forwarding traffic using the lookup table, and store the packet in the local receive ring or the forwarding receive ring based on the type. The VNIC is configured to retrieve the packet from the receive ring, and process the packet in a type-specific manner based on the receive ring where the packet was stored, where the type-specific manner is different for local traffic and forwarding traffic.

摘要翻译： 系统包括与计算机相关联的物理NIC，并且包括用于存储寻址到VNIC的网络流量的接收环，其中接收环包括用于存储本地业务的本地接收环和用于存储转发业务的转发接收环。 物理NIC还包括硬件分类器，其被配置为在查找表中注册与VNIC相关联的本地互联网协议（IP）地址，接收包括目的地IP地址的分组，将分组分类为本地业务或使用查找表转发业务 并根据类型将数据包存储在本地接收环或转发接收环中。 VNIC被配置为从接收环检索数据包，并根据存储数据包的接收环以类型特定的方式处理数据包，其中类型特定的方式对于本地流量和转发流量是不同的。

公开(公告)号：US07591011B1

公开(公告)日：2009-09-15

申请号：US11112947

申请日：2005-04-22

申请人： Nicolas G. Droux ,  Sunay Tripathi ,  Eric T. Cheng

发明人： Nicolas G. Droux ,  Sunay Tripathi ,  Eric T. Cheng

IPC分类号： G06F9/00 ,  G06F15/16 ,  G06F17/00

CPC分类号： H04L12/4641

摘要： A computing system is configured to receive incoming packets at a first priority designated for use when receiving packets that are not associated with specific subscription levels. Incoming packets are examined to determine whether they are associated with a particular subscription level. Responsive to a determination that a given packet received over a particular connection is associated with a particular subscription level, the computing system is reconfigured to process packets subsequently received over the same connection at a different priority associated with the particular subscription level.

摘要翻译： 计算系统被配置为当接收到与特定订阅级别不相关联的分组时，以指定用于的第一优先级接收输入分组。 检查进入的分组以确定它们是否与特定订阅级别相关联。 响应于通过特定连接接收到的给定分组与特定订阅级别相关联的确定，计算系统被重新配置为处理随后在与特定订阅级别相关联的不同优先级在相同连接上接收的分组。

公开(公告)号：US20090222567A1

公开(公告)日：2009-09-03

申请号：US12040105

申请日：2008-02-29

申请人： Sunay Tripathi ,  Nicolas G. Droux

发明人： Sunay Tripathi ,  Nicolas G. Droux

IPC分类号： G06F15/16

CPC分类号： H04L29/08846 ,  H04L45/00 ,  H04L69/18

摘要： A method for media-based data transfer involves obtaining data, by a first virtual network interface card (VNIC) selected from multiple VNICs, where the multiple VNICs are associated with multiple virtual machines, where each of the multiple virtual machines is located in one of multiple computers communicatively coupled with each other via a chassis interconnect, and where the multiple computers share a physical network interface. The method further involves determining a media type connecting the first VNIC with a second VNIC selected from the multiple VNICs, where the first VNIC and the second VNIC are nodes of a virtual network path, where the first VNIC is located in a first computer selected from the multiple computers, and where the second VNIC is located in a second computer selected from the multiple computers. The method further involves choosing a transfer protocol based on the media type, and transferring the data from the first VNIC to the second VNIC using the transfer protocol.

摘要翻译： 用于基于媒体的数据传输的方法涉及通过从多个VNIC中选择的第一虚拟网络接口卡（VNIC）获取数据，其中多个VNIC与多个虚拟机相关联，其中多个虚拟机中的每一个位于 多个计算机经由机箱互连彼此通信地耦合，并且其中多个计算机共享物理网络接口。 该方法还包括确定连接第一VNIC与从多个VNIC中选择的第二VNIC的媒体类型，其中第一VNIC和第二VNIC是虚拟网络路径的节点，其中第一VNIC位于选自 多个计算机，以及第二VNIC位于从多个计算机中选择的第二计算机中的位置。 该方法还涉及基于媒体类型选择传输协议，并使用传输协议将数据从第一VNIC传输到第二VNIC。

公开(公告)号：US20080019377A1

公开(公告)日：2008-01-24

申请号：US11489929

申请日：2006-07-20

申请人： Erik Nordmark ,  Nicolas G. Droux ,  Sunay Tripathi

发明人： Erik Nordmark ,  Nicolas G. Droux ,  Sunay Tripathi

IPC分类号： H04L12/56

CPC分类号： H04L45/00 ,  H04L45/10

摘要： A method for processing packets that includes receiving a first packet for a first target on a host, prior to sending the packet to a Network Layer in the host, determining the first target of the first packet, obtaining a first target ID associated with the first target, obtaining a first virtual network stack (VNS) instance ID using the first target ID, and obtaining a first VNS Instance parameter using the first VNS instance ID, sending the first packet to the Network Layer, and processing the first packet in the Network Layer using the first VNS Instance parameter to obtain a first network processed packet.

摘要翻译： 一种处理分组的方法，包括在将分组发送到主机中的网络层之前接收主机上的第一目标的第一分组，确定第一分组的第一目标，获得与第一分组相关联的第一目标ID 使用所述第一目标ID获取第一虚拟网络栈（VNS）实例ID，以及使用所述第一VNS实例ID获取第一VNS实例参数，将所述第一分组发送到所述网络层，以及处理所述网络中的所述第一分组 使用第一个VNS Instance参数来获取第一个网络处理的数据包。

公开(公告)号：US20080019365A1

公开(公告)日：2008-01-24

申请号：US11489943

申请日：2006-07-20

申请人： Sunay Tripathi ,  Tim P. Marsland ,  Nicolas G. Droux ,  Kais Belgaied

发明人： Sunay Tripathi ,  Tim P. Marsland ,  Nicolas G. Droux ,  Kais Belgaied

IPC分类号： H04L12/56 ,  H04L12/66

CPC分类号： H04L12/4641

摘要： A method for processing packets that includes receiving a first packet for a first virtual machine by a network interface card (NIC), classifying the first packet using a hardware classifier, where the hardware classifier is located on the NIC, sending the first packet to a first one of a plurality of receive rings based on the classification, sending the first packet from the first one of the plurality of receive rings to a first virtual network interface card (VNIC), sending the first packet from the first VNIC to a first interface, and sending the first packet from the first interface to the first virtual machine, where the first virtual machine is associated with the first interface, where the first VNIC and the first virtual machine are executing on a host.

摘要翻译： 一种处理分组的方法，包括通过网络接口卡（NIC）接收第一虚拟机的第一分组，使用硬件分类器对硬件分类器进行分类，其中硬件分类器位于NIC上，将第一分组发送到 将第一分组从多个接收环中的第一个发送到第一虚拟网络接口卡（VNIC），将第一分组从第一VNIC发送到第一接口 以及将所述第一分组从所述第一接口发送到所述第一虚拟机，其中所述第一虚拟机与所述第一接口相关联，其中所述第一VNIC和所述第一虚拟机在主机上执行。

公开(公告)号：US20080019359A1

公开(公告)日：2008-01-24

申请号：US11489942

申请日：2006-07-20

申请人： Nicolas G. Droux ,  Erik Nordmark ,  Sunay Tripathi

发明人： Nicolas G. Droux ,  Erik Nordmark ,  Sunay Tripathi

IPC分类号： H04L12/56

CPC分类号： H04L12/4641

摘要： A method for processing packets that includes receiving a first packet for a first target by a network interface card (NIC), classifying the first packet, sending the first packet to a first receive ring in the NIC based on the classification of the first packet, sending the first packet to a Network Layer from the first receive ring, sending a first virtual network stack (VNS) Instance ID associated with the first receive ring to the Network Layer, obtaining a first VNS Instance parameter using the first VNS Instance ID, and processing the first packet in the Network Layer using the first VNS Instance parameter to obtain a first network processed packet.

摘要翻译： 一种用于处理分组的方法，包括：通过网络接口卡（NIC）接收第一目标的第一分组，对所述第一分组进行分类，基于所述第一分组的分类将所述第一分组发送到所述NIC中的第一接收环; 从第一接收环发送第一分组到网络层，向网络层发送与第一接收环相关联的第一虚拟网络栈（VNS）实例ID，使用第一VNS实例ID获得第一VNS实例参数，以及 使用第一VNS实例参数来处理网络层中的第一个数据包，以获得第一个网络处理的数据包。

公开(公告)号：US08713202B2

公开(公告)日：2014-04-29

申请号：US11489923

申请日：2006-07-20

申请人： Nicolas G. Droux ,  Kais Belgaied ,  Erik Nordmark ,  Sunay Tripathi

发明人： Nicolas G. Droux ,  Kais Belgaied ,  Erik Nordmark ,  Sunay Tripathi

IPC分类号： G06F15/16 ,  G06F15/177 ,  G06F15/173

CPC分类号： H04L12/66

摘要： A method for changing network configuration parameters that includes generating a request to change a network configuration parameter, where the request is generated by a virtual machine, sending the request to a virtual network interface card (VNIC) associated with the virtual machine, sending the request to a VNIC configuration database associated with the VNIC, determining whether the virtual machine is allowed to change the network configuration parameter, if the virtual machine is allowed to change the network configuration parameter, updating the VNIC configuration database and VNIC to reflect the change in the network configuration parameter, and notifying the virtual machine that the change in network configuration parameter is allowed, and if the virtual machine is not allowed to change the network configuration parameter, dropping the request.

摘要翻译： 一种用于改变网络配置参数的方法，所述方法包括生成改变网络配置参数的请求，所述请求由所述虚拟机产生，所述请求发送到与所述虚拟机相关联的虚拟网络接口卡（VNIC），发送所述请求 到与VNIC相关联的VNIC配置数据库，确定虚拟机是否被允许改变网络配置参数，如果虚拟机被允许改变网络配置参数，更新VNIC配置数据库和VNIC以反映该变更 网络配置参数，并通知虚拟机允许网络配置参数的更改，如果虚拟机不允许更改网络配置参数，则丢弃请求。

公开(公告)号：US08478853B2

公开(公告)日：2013-07-02

申请号：US12474664

申请日：2009-05-29

申请人： Nicolas G. Droux ,  Sunay Tripathi

发明人： Nicolas G. Droux ,  Sunay Tripathi

IPC分类号： G06F15/173

CPC分类号： H04L61/6022 ,  G06F9/45537 ,  H04L29/12839 ,  H04L49/90 ,  H04L69/32

摘要： A method for managing a guest OS executing on a host. The method includes receiving, from the guest OS associated with a first MAC address, a second MAC address, wherein the first MAC address is associated with a first guest VNIC, wherein the second MAC address is associated with a second guest VNIC; configuring an intermediate VNIC executing on the host OS to forward packets associated with the second MAC address to the guest OS, wherein packets associated with the first MAC address and received by the intermediate VNIC are forwarded to the guest OS; and forwarding the second MAC address from the intermediate VNIC to a device driver associated with a physical NIC, wherein the device driver configures a classifier on the physical NIC to forward packets associated with the second MAC address to a first HRR located on the physical NIC associated with the intermediate VNIC.

摘要翻译： 一种用于管理在主机上执行的访客操作系统的方法。 该方法包括从与第一MAC地址相关联的客户OS接收第二MAC地址，其中第一MAC地址与第一客户端VNIC相关联，其中第二MAC地址与第二客户端VNIC相关联; 配置在所述主机OS上执行的中间VNIC以将与所述第二MAC地址相关联的分组转发到所述客户OS，其中与所述第一MAC地址相关联并由所述中间VNIC接收的分组被转发到所述客户OS; 以及将所述第二MAC地址从所述中间VNIC转发到与物理NIC相关联的设备驱动器，其中所述设备驱动程序在所述物理NIC上配置分类器以将与所述第二MAC地址相关联的分组转发到位于所述物理NIC相关联的第一HRR 与中间VNIC。

公开(公告)号：US20130033981A1

公开(公告)日：2013-02-07

申请号：US13650490

申请日：2012-10-12

申请人： Nicolas G. Droux ,  Sunay Tripathi

发明人： Nicolas G. Droux ,  Sunay Tripathi

IPC分类号： H04L12/24 ,  H04L12/26

CPC分类号： H04L45/245 ,  G06F9/45558 ,  G06F2009/45595 ,  Y02D50/30

摘要： A system for distributing network traffic among direct hardware access datapaths, comprising: a processor; one or more activated PNICs; a host operating system; and a virtual machine (VM). Each activated PNIC sends and receives data packets over a network. Each activated PNIC is configured with a virtual function. The VM includes a VNIC and a virtual link aggregator configured to maintain a list identifying each activated PNIC. Virtual function mappings for the VM associate the VM with virtual functions for the activated PNICs. The virtual link aggregator selects the first activated PNIC for servicing a network connection and determines a virtual function for the first activated PNIC. The VNIC for the first activated PNIC uses the virtual function to directly transfer network traffic for the network connection between the VM and the first activated PNIC.

摘要翻译： 一种用于在直接硬件访问数据路径之间分发网络流量的系统，包括：处理器; 一个或多个激活的PNIC; 主机操作系统; 和虚拟机（VM）。 每个激活的PNIC通过网络发送和接收数据包。 每个激活的PNIC配置有虚拟功能。 VM包括VNIC和虚拟链路聚合器，其被配置为维护列出识别每个激活的PNIC的列表。 VM的虚拟功能映射将VM与激活的PNIC的虚拟功能相关联。 虚拟链路聚合器选择用于维护网络连接的第一激活PNIC并且确定用于第一激活的PNIC的虚拟功能。 用于第一个激活的PNIC的VNIC使用虚拟功能直接传输VM和第一个激活的PNIC之间的网络连接的网络流量。