DYNAMIC MODIFICATION OF TRAFFIC MONITORING POLICIES FOR A CONTAINERIZED ENVIRONMENT

    公开(公告)号:US20240275680A1

    公开(公告)日:2024-08-15

    申请号:US18165250

    申请日:2023-02-06

    申请人: Gigamon Inc.

    摘要: A method of automatic and dynamic environment discovery and policy adaptation for a containerized environment is disclosed. A plurality of traffic monitoring policies for acquiring and monitoring data traffic transmitted between one or more components of a containerized environment are accessed. The containerized environment includes a plurality of software-implemented containers. The traffic monitoring policies are caused to be applied to one or more components in the containerized environment. A change to a configuration of the containerized environment is automatically detected. In response, one or more containers of the plurality of software-implemented containers are automatically identified as containers affected by the change. Based on that identification, a modification of a traffic monitoring policy is then automatically determined to produce a modified traffic monitoring policy, and the modified traffic monitoring policy is caused to be applied to one or more components in the containerized environment.

    DISTRIBUTED PACKET DEDUPLICATION
    2.
    发明公开

    公开(公告)号:US20230327964A1

    公开(公告)日:2023-10-12

    申请号:US18334222

    申请日:2023-06-13

    申请人: Gigamon Inc.

    发明人: Anil RAO

    摘要: Introduced here are network visibility appliances capable of implementing a distributed deduplication scheme by routing traffic amongst multiple instances of a deduplication program. Data traffic can be forwarded to a pool of multiple network visibility appliances that collectively ensure no duplicate copies of data packets exist in the data traffic. The network visibility appliances can route the traffic to different instances of the deduplication program so that duplicate copies of a data packet are guaranteed to arrive at the same instance of the deduplication program, regardless of which network visibility appliance(s) initially received the duplicate copies of the data packet.

    One-Armed Inline Decryption/Encryption Proxy Operating in Transparent Bridge Mode

    公开(公告)号:US20230128082A1

    公开(公告)日:2023-04-27

    申请号:US18057581

    申请日:2022-11-21

    申请人: Gigamon Inc.

    IPC分类号: H04L9/40 H04L9/32 H04L12/46

    摘要: A proxy device coupled to a network receives communications between a client and a server on the network. The proxy device operates transparently to the client and the server, while coupled to receive and process the communications from a node on the network via a network port in a one-armed configuration. The proxy device communicates packets of the communications with an external tool coupled to the proxy device via a tool port and operates transparently to the nod and the tool. In certain embodiments, the tool may be a network security device, such as a firewall.

    One-armed inline decryption/encryption proxy operating in transparent bridge mode

    公开(公告)号:US11509631B2

    公开(公告)日:2022-11-22

    申请号:US16895831

    申请日:2020-06-08

    申请人: Gigamon Inc.

    IPC分类号: H04L9/40 H04L9/32 H04L12/46

    摘要: A proxy device coupled to a network receives communications between a client and a server on the network. The proxy device operates transparently to the client and the server, while coupled to receive and process the communications from a node on the network via a network port in a one-armed configuration. The proxy device communicates packets of the communications with an external tool coupled to the proxy device via a tool port and operates transparently to the nod and the tool. In certain embodiments, the tool may be a network security device, such as a firewall.

    Dynamic mapping of nodes responsible for monitoring traffic of an evolved packet core

    公开(公告)号:US11057820B2

    公开(公告)日:2021-07-06

    申请号:US16696693

    申请日:2019-11-26

    申请人: Gigamon Inc.

    摘要: Introduced here are visibility platforms able to process the traffic handled by the gateways of an Evolved Packet Core (EPC) with Control and User Plane Separation (CUPS). A visibility platform can include a control processing node (CPN) and one or more user processing nodes (UPNs). The visibility platform may populate a data structure in which the CPN and UPNs are associated with locations along an interface on which Sx/N4 traffic is exchanged between the control and user planes. Each location may be representative of the point on the Sx/N4 interface at which Sx/N4 traffic processed by the corresponding node is acquired. The CPN can use the data structure to program session flows that impact how user traffic is handled by the UPNs.

    DYNAMIC MAPPING OF NODES RESPONSIBLE FOR MONITORING TRAFFIC OF AN EVOLVED PACKET CORE

    公开(公告)号:US20210160759A1

    公开(公告)日:2021-05-27

    申请号:US16696693

    申请日:2019-11-26

    申请人: Gigamon Inc.

    IPC分类号: H04W40/24 H04W40/30 H04W24/08

    摘要: Introduced here are visibility platforms able to process the traffic handled by the gateways of an Evolved Packet Core (EPC) with Control and User Plane Separation (CUPS). A visibility platform can include a control processing node (CPN) and one or more user processing nodes (UPNs). The visibility platform may populate a data structure in which the CPN and UPNs are associated with locations along an interface on which Sx/N4 traffic is exchanged between the control and user planes. Each location may be representative of the point on the Sx/N4 interface at which Sx/N4 traffic processed by the corresponding node is acquired. The CPN can use the data structure to program session flows that impact how user traffic is handled by the UPNs.

    Graph-based network fabric for a network visibility appliance

    公开(公告)号:US10965515B2

    公开(公告)日:2021-03-30

    申请号:US15805460

    申请日:2017-11-07

    申请人: Gigamon Inc.

    发明人: Anil Rao

    摘要: With exponential growth in virtualized traffic within physical data centers, many end users (e.g., individuals and enterprises) have begun moving work processes and data to cloud computing platforms. A visibility platform can be used to monitor virtualized traffic traversing a cloud computing platform, such as Amazon Web Services, VMware, or OpenStack. But it can be difficult to manage how the visibility platform handles incoming virtualized traffic. Introduced here, therefore, are graphs that visually represent the network fabric of a visibility platform. When the network fabric of the visibility platform is represented as a graph, an end user can easily modify the network fabric, for example, by adding, removing, or modifying nodes that represent network objects, adding, removing, or modifying connections between pairs of nodes that represent traffic flows between pairs of network objects, etc.

    Policy-based sampling of network flows at a network visibility node

    公开(公告)号:US10931545B2

    公开(公告)日:2021-02-23

    申请号:US15826286

    申请日:2017-11-29

    申请人: Gigamon Inc.

    摘要: Methods and systems are disclosed for analyzing control signaling messages over a network to inform policy-based sampling of network flows using a network visibility node communicatively coupled to the network. In an illustrative embodiment, session dialog information is extracted from control signaling messages exchanged between subscriber devices initiating a communications session and tracked. A network flow associated with the communications session is selected for sampling at the network visibility node based on the tracked session dialog information. Packets associated with the network flow are then forwarded by the network visibility node to an external tool for processing.