利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

1878 条记录 (耗时 0.084 秒)

    Security policy recommendation generation
    71.
    发明授权
    Security policy recommendation generation 有权

    公开(公告)号：US11349876B2

    公开(公告)日：2022-05-31

    申请号：US16554414

    申请日：2019-08-28

    申请人： VMware, Inc.

    发明人： Sunitha Krishna ,  Kausum Kumar ,  Rajiv Mordani ,  Radha Popuri ,  Kavya Kambi Ravi ,  Ankur Saran ,  Farzad Ghannadian

    IPC分类号： H04L29/06 ,  G06N20/00 ,  G06N5/04 ,  H04L9/40

    摘要： Some embodiments provide a novel method for collecting and reporting attributes of data flows associated with machines executing on a plurality of host computers to an analysis appliance and providing visual representations of the data to a user. Some embodiments provide a visual representation of the collected data that allows a user to select a set of machines and flows and initiate recommendation generation based on the selected machines and flows. The recommendation generation, in some embodiments, includes identifying flows for which rules have not been defined and filtering the identified rules to remove flows for which rules should not be defined. Some embodiments use the identified rues to identify services and groups associated with the rules and generate recommendations for rules, groups and services based on the identified flows, groups and services. The recommendations, in some embodiments, are implemented as a single PATCH API.

    Correlation key used to correlate flow and con text data
    74.
    发明授权
    Correlation key used to correlate flow and con text data 有权

    公开(公告)号：US11321213B2

    公开(公告)日：2022-05-03

    申请号：US16745248

    申请日：2020-01-16

    申请人： VMware, Inc.

    发明人： Laxmikant Vithal Gunda ,  Arnold Poon ,  Farzad Ghannadian

    IPC分类号： G06F11/34 ,  G06F9/455 ,  G06F11/30

    摘要： Some embodiments provide a novel method for collecting and reporting attributes of data flows associated with machines executing on a plurality of host computers to an analysis appliance. Some embodiments collect, each time a request for a new data message flow is initiated, a set of contextual attributes (i.e., context data) associated with the requested new data message flow. The method, in some embodiments, generates a correlation data set and provides the correlation data set to be included in flow data regarding the requested data message flow to be used by the analysis appliance to correlate context data and flow data received as separate data sets from multiple host computers.

    Provisioning network services in a software defined data center
    75.
    发明授权
    Provisioning network services in a software defined data center 有权

    公开(公告)号：US11297004B2

    公开(公告)日：2022-04-05

    申请号：US16786867

    申请日：2020-02-10

    申请人： Nicira, Inc.

    发明人： Jayant Jain ,  Raju Koganty ,  Anirban Sengupta

    IPC分类号： H04L12/911 ,  G06F9/50 ,  H04L12/24 ,  H04L47/70 ,  H04L41/5051 ,  H04L41/5041 ,  H04L41/50

    摘要： A novel method for dynamic network service allocation that maps generic services into specific configurations of service resources in a network is provided. An application that is assigned to be performed by computing resources in the network is associated with a set of generic services, and the method maps the set of generic services to the service resources based on the assignment of the application to the computing resources. The mapping of generic services is further based on a level of service that is chosen for the application, where the set of generic services are mapped to different sets of network resources according to different levels of services.

    Monitoring distributed applications
    76.
    发明授权
    Monitoring distributed applications 有权

    公开(公告)号：US11296960B2

    公开(公告)日：2022-04-05

    申请号：US15915585

    申请日：2018-03-08

    申请人： Nicira, Inc.

    发明人： Bin Wang ,  Margaret Petrus ,  Farzad Ghannadian ,  Rajiv Krishnamurthy

    IPC分类号： G06F15/173 ,  H04L43/04 ,  H04L41/22 ,  H04L41/12 ,  H04L41/06

    摘要： Some embodiments provide a method for monitoring a distributed application. The method receives a request to perform data collection for the distributed application. The method identifies data compute nodes (DCNs) that implement the distributed application. The method sends commands to host machines on which the identified DCNs operate to detect events related to the DCNs and provide data regarding the detected events. The method uses the data regarding the detected events to generate a user interface (UI) display of the topology of the distributed application.

    Distributed fault tolerant service chain
    78.
    发明授权
    Distributed fault tolerant service chain 有权

    公开(公告)号：US11283717B2

    公开(公告)日：2022-03-22

    申请号：US16668505

    申请日：2019-10-30

    申请人： VMware, Inc.

    发明人： Jeremy Tidemann ,  Constantine Polychronopoulos ,  Marc-Andre Bordeleau ,  Edward Choh ,  Ojas Gupta ,  Robert Kidd ,  Raja Kommula ,  Georgios Oikonomou ,  Mingjie Zhao

    IPC分类号： H04L12/743 ,  H04L45/7453 ,  H04L45/28 ,  H04L9/06 ,  H04L45/00 ,  H04L45/021

    摘要： Some embodiments of the invention provide novel methods for performing services on data messages passing through a network connecting one or more datacenters, such as software defined datacenters (SDDCs). The method of some embodiments uses service containers executing on host computers to perform different chains (e.g., ordered sequences) of services on different data message flows. For a data message of a particular data message flow that is received or generated at a host computer, the method in some embodiments uses a service classifier executing on the host computer to identify a service chain that specifies several services to perform on the data message. For each service in the identified service chain, the service classifier identifies a service container for performing the service. The service classifier then forwards the data message to a service forwarding element to forward the data message through the service containers identified for the identified service chain. The service classifier and service forwarding element are implemented in some embodiments as processes that are defined as hooks in the virtual interface endpoints (e.g., virtual Ethernet ports) of the host computer's operating system (e.g., Linux operating system) over which the service containers execute.

    Using physical location to modify behavior of a distributed virtual network element
    80.
    发明授权
    Using physical location to modify behavior of a distributed virtual network element 有权

    公开(公告)号：US11252037B2

    公开(公告)日：2022-02-15

    申请号：US16294894

    申请日：2019-03-06

    申请人： Nicira, Inc.

    发明人： Ganesan Chandrashekhar ,  Vivek Agarwal

    IPC分类号： H04L12/24 ,  H04L12/721 ,  H04L12/713 ,  G06F9/445 ,  G06F9/455 ,  G06F9/451

    摘要： A system for network virtualization in which physical network resources in different physical contexts are configured to implement one or more distributed logical network elements, at least some of the physical network resources implementing the distributed logical network elements configured according the physical context of those network resources. The local configuration of a physical locale is a version of the logical configuration that is modified specifically for the physical locale. Such modification is based on locale identifiers that are assigned to the physical locales. Some systems use locale-specific information to modify next-hop preference. Some system use locally modified configurations to determine the placement of VMs.