Filter selection and resuse
    1.
    发明授权
    Filter selection and resuse 有权
    过滤器选择和重新使用

    公开(公告)号:US08949413B2

    公开(公告)日:2015-02-03

    申请号:US13174216

    申请日:2011-06-30

    CPC classification number: H04L63/0263 H04L63/102

    Abstract: In general, techniques are described for selectively applying and reusing filters stored in a router. In one example, a method includes receiving a network access request from a first user. The method also includes selecting a candidate rule group associated with the packet flow, wherein the candidate rule group comprises one or more currently deployed rules of an existing rule group on the computing device that are currently installed within a forwarding plane and are being applied by the forwarding plane to network traffic associated with a second user. The method also includes installing a new rule group comprising the one or more currently deployed rules of the existing rule group and one or more new rules associated with the first user and not currently installed within a forwarding plane. The method also includes applying each rule of the new rule group to network traffic associated with the first user.

    Abstract translation: 通常,描述了用于选择性地应用和重用存储在路由器中的过滤器的技术。 在一个示例中,一种方法包括从第一用户接收网络访问请求。 所述方法还包括选择与所述分组流相关联的候选规则组,其中所述候选规则组包括所述计算设备上当前安装在转发平面内并由所述计算设备应用的一个或多个当前部署的规则组 转发平面到与第二用户相关联的网络流量。 该方法还包括安装新规则组,其包括现有规则组的一个或多个当前部署的规则以及与第一用户相关联并且当前未安装在转发平面内的一个或多个新规则。 该方法还包括将新规则组的每个规则应用于与第一用户相关联的网络流量。

    Breakout gateway for mobile data traffic
    2.
    发明授权
    Breakout gateway for mobile data traffic 有权
    移动数据流量的突围网关

    公开(公告)号:US08520615B2

    公开(公告)日:2013-08-27

    申请号:US12853707

    申请日:2010-08-10

    CPC classification number: H04W8/082 H04L45/22 H04W40/34 H04W80/04 H04W88/16

    Abstract: In general, the invention is directed to techniques for breaking out mobile data traffic from a mobile service provider network to a packet data network. For example, as described herein, a breakout gateway device (BGW) receives a first service request and data traffic for a data session associated with the requested service from a mobile device in a radio access network, wherein the first service request is addressed to a serving node of a mobile core network of the mobile service provider network, and wherein the data traffic is destined for the PDN. A control packet analysis module forwards the first service request from the breakout gateway device to the serving node. A breakout module of the BGW bypasses the serving node by sending the data traffic from the breakout gateway device to the PDN on a data path from the radio access network to the PDN.

    Abstract translation: 通常,本发明涉及用于将移动数据业务从移动业务提供商网络分解成分组数据网络的技术。 例如,如本文所述,分组网关设备(BGW)从无线电接入网络中的移动设备接收与所请求的服务相关联的数据会话的第一服务请求和数据业务,其中第一服务请求被寻址到 移动服务提供商网络的移动核心网络的服务节点,并且其中数据业务指向PDN。 控制分组分析模块将第一服务请求从分组网关设备转发到服务节点。 BGW的突围模块通过在从无线接入网络到PDN的数据路径上将数据业务从分组网关设备发送到PDN来绕过服务节点。

    MOBILE GATEWAY HAVING DECENTRALIZED CONTROL PLANE FOR ANCHORING SUBSCRIBER SESSIONS
    3.
    发明申请
    MOBILE GATEWAY HAVING DECENTRALIZED CONTROL PLANE FOR ANCHORING SUBSCRIBER SESSIONS 有权
    具有分散式控制平台的移动网关用于锚定用户登记

    公开(公告)号:US20130007237A1

    公开(公告)日:2013-01-03

    申请号:US13172556

    申请日:2011-06-29

    CPC classification number: H04W8/082

    Abstract: In general, techniques are described for decentralizing handling of subscriber sessions within a gateway device of a mobile network. A mobile network gateway comprises a data plane having a plurality of forwarding components to receive session requests from a mobile service provider network in which the mobile network gateway resides. A control plane comprises a plurality of distributed subscriber management service units coupled by a switch fabric to the data plane. Each of the subscriber management service units serve as anchors for communication sessions for mobile devices that are accessing one or more packet data network by the mobile service provider network. A request delegation module within each of the forwarding components directs the session requests to the subscriber management service units unit to provide management services for the sessions requested by the mobile device.

    Abstract translation: 一般来说,描述了用于在移动网络的网关设备内分散处理用户会话的技术。 移动网络网关包括具有多个转发组件的数据平面,用于从移动网络网关驻留的移动服务提供商网络接收会话请求。 控制平面包括由交换结构耦合到数据平面的多个分布式用户管理服务单元。 每个用户管理服务单元用作移动服务提供商网络正在访问一个或多个分组数据网络的移动设备的通信会话的锚点。 每个转发组件内的请求委托模块将会话请求引导到用户管理服务单元单元,以为移动设备请求的会话提供管理服务。

    Obtaining path information related to a virtual private LAN services (VPLS) based network
    4.
    发明申请
    Obtaining path information related to a virtual private LAN services (VPLS) based network 有权
    获取与基于虚拟专用LAN服务(VPLS)的网络相关的路径信息

    公开(公告)号:US20060013142A1

    公开(公告)日:2006-01-19

    申请号:US10891546

    申请日:2004-07-15

    CPC classification number: H04L12/4675 H04L12/462 H04L43/10 H04L49/555

    Abstract: Path information is obtained in a VPLS-based network by generating special Layer 2 frames (referred to herein as “trace-request frames”), performing source MAC filtering to identify the trace-request frames, and generating a special frame (referred to herein as a “trace-reply frame”) when the source MAC filtering identifies a trace-request frame. Upon identifying a trace-request frame, path information is collected and embedded into the trace-reply frame. The trace-reply frame is then sent to the originating node where the path information is used to learn the path that the trace-request frame traversed. By sending multiple trace-request frames with different source MAC addresses, path information received from source MAC filtering at different nodes in the VPLS-based network can be collected and used to learn an entire path of interest.

    Abstract translation: 通过生成特殊的第2层帧(这里称为“跟踪请求帧”),执行源MAC过滤以识别跟踪请求帧并生成特殊帧(在本文中称为),在基于VPLS的网络中获得路径信息 作为“跟踪回复帧”),当源MAC过滤标识跟踪请求帧时。 在识别跟踪请求帧之后,路径信息被收集并嵌入跟踪回复帧。 然后将跟踪回复帧发送到始发节点,其中使用路径信息来学习跟踪请求帧所经过的路径。 通过发送具有不同源MAC地址的多个跟踪请求帧,可以收集用于基于VPLS的网络中的不同节点处的源MAC过滤接收的路径信息,并用于学习整个感兴趣的路径。

    Performing scalable L2 wholesale services in computer networks using customer VLAN-based forwarding and filtering
    5.
    发明授权
    Performing scalable L2 wholesale services in computer networks using customer VLAN-based forwarding and filtering 有权
    使用客户基于VLAN的转发和过滤在计算机网络中执行可扩展的L2批发服务

    公开(公告)号:US08675664B1

    公开(公告)日:2014-03-18

    申请号:US13197506

    申请日:2011-08-03

    Abstract: In general, techniques are described that facilitate scalable wholesale layer two (L2) connectivity between customers and service providers and a demarcation between the L2 wholesale network and one or more ISPs with which customers communicate L2 PDUs. In one example, a network device receives PDU having both a service identifier identifying a service virtual local area network (SVLAN) and a customer identifier identifying a customer VLAN (CVLAN). A virtual switch determines whether an entry of a L2 learning table is associated with both the service identifier and the customer identifier of the PDU. When no such entry exists, a VLAN learning module updates the L2 learning table to create a new entry that maps to a network device interface and is associated with both the service identifier of the PDU and a plurality of customer identifiers that includes the customer identifier of the PDU.

    Abstract translation: 通常,描述了促进客户和服务提供商之间的可扩展的批发第二层(L2)连接性的技术,以及L2批发网络与客户与其通信L2 PDU的一个或多个ISP之间的分界。 在一个示例中,网络设备接收具有标识服务虚拟局域网(SVLAN)的服务标识符和标识客户VLAN(CVLAN)的客户标识符的PDU。 虚拟交换机确定L2学习表的条目是否与PDU的服务标识符和客户标识符相关联。 当不存在这样的条目时,VLAN学习模块更新L2学习表以创建映射到网络设备接口的新条目,并且与PDU的服务标识符和多个客户标识符相关联,多个客户标识符包括客户标识符 PDU。

    FILTER SELECTION AND RESUSE
    6.
    发明申请
    FILTER SELECTION AND RESUSE 有权
    过滤器选择和排除

    公开(公告)号:US20130007257A1

    公开(公告)日:2013-01-03

    申请号:US13174216

    申请日:2011-06-30

    CPC classification number: H04L63/0263 H04L63/102

    Abstract: In general, techniques are described for selectively applying and reusing filters stored in a router. In one example, a method includes receiving a network access request from a first user. The method also includes selecting a candidate rule group associated with the packet flow, wherein the candidate rule group comprises one or more currently deployed rules of an existing rule group on the computing device that are currently installed within a forwarding plane and are being applied by the forwarding plane to network traffic associated with a second user. The method also includes installing a new rule group comprising the one or more currently deployed rules of the existing rule group and one or more new rules associated with the first user and not currently installed within a forwarding plane. The method also includes applying each rule of the new rule group to network traffic associated with the first user.

    Abstract translation: 通常,描述了用于选择性地应用和重用存储在路由器中的过滤器的技术。 在一个示例中,一种方法包括从第一用户接收网络访问请求。 所述方法还包括选择与所述分组流相关联的候选规则组,其中所述候选规则组包括所述计算设备上当前安装在转发平面内并由所述计算设备应用的一个或多个当前部署的规则组 转发平面到与第二用户相关联的网络流量。 该方法还包括安装新规则组,其包括现有规则组的一个或多个当前部署的规则以及与第一用户相关联并且当前未安装在转发平面内的一个或多个新规则。 该方法还包括将新规则组的每个规则应用于与第一用户相关联的网络流量。

    Computation of next hops within layer two networks
    7.
    发明授权
    Computation of next hops within layer two networks 有权
    第二层网络中下一跳的计算

    公开(公告)号:US08295291B1

    公开(公告)日:2012-10-23

    申请号:US12643849

    申请日:2009-12-21

    CPC classification number: H04L45/32 H04L45/48 H04L45/66

    Abstract: A device includes one or more network interfaces to receive layer two (L2) communications from an L2 network having a plurality of L2 devices; and a control unit to forward the L2 communications in accordance with forwarding information defining a plurality of flooding next hops. Each of the flooding next hops stored by the control unit specifies a set of the L2 devices within the L2 network to which to forward L2 communications in accordance with a plurality of trees, where each of the trees has a different one of the plurality of L2 devices as a root node. The control unit of the device computes a corresponding one of flooding next hops for each of the trees using only a subset of the trees without computing all of the trees having all of the different L2 network devices as root nodes.

    Abstract translation: 一种设备包括一个或多个网络接口,用于从具有多个L2设备的L2网络接收第二层(L2)通信; 以及控制单元,用于根据定义多个洪泛下一跳的转发信息转发L2通信。 由控制单元存储的每个洪泛下一跳都指定L2网络内的L2设备的集合,根据多个树进行L2通信,其中每个树具有多个L2中的不同的一个 设备作为根节点。 设备的控制单元仅使用树的子集计算每个树的洪泛下一跳的相应的一个,而不计算具有所有不同的L2网络设备的所有树作为根节点。

    Obtaining path information related to a virtual private LAN services (VPLS) based network
    8.
    发明授权
    Obtaining path information related to a virtual private LAN services (VPLS) based network 有权
    获取与基于虚拟专用LAN服务(VPLS)的网络相关的路径信息

    公开(公告)号:US07733856B2

    公开(公告)日:2010-06-08

    申请号:US10891546

    申请日:2004-07-15

    CPC classification number: H04L12/4675 H04L12/462 H04L43/10 H04L49/555

    Abstract: Path information is obtained in a VPLS-based network by generating special Layer 2 frames (referred to herein as “trace-request frames”), performing source MAC filtering to identify the trace-request frames, and generating a special frame (referred to herein as a “trace-reply frame”) when the source MAC filtering identifies a trace-request frame. Upon identifying a trace-request frame, path information is collected and embedded into the trace-reply frame. The trace-reply frame is then sent to the originating node where the path information is used to learn the path that the trace-request frame traversed. By sending multiple trace-request frames with different source MAC addresses, path information received from source MAC filtering at different nodes in the VPLS-based network can be collected and used to learn an entire path of interest.

    Abstract translation: 通过生成特殊的第2层帧(这里称为“跟踪请求帧”),执行源MAC过滤以识别跟踪请求帧并生成特殊帧(在本文中称为),在基于VPLS的网络中获得路径信息 作为“跟踪回复帧”),当源MAC过滤标识跟踪请求帧时。 在识别跟踪请求帧之后,路径信息被收集并嵌入跟踪回复帧。 然后将跟踪回复帧发送到始发节点,其中使用路径信息来学习跟踪请求帧所经过的路径。 通过发送具有不同源MAC地址的多个跟踪请求帧,可以收集用于基于VPLS的网络中的不同节点处的源MAC过滤接收的路径信息,并用于学习整个感兴趣的路径。

    Handling errors in subscriber session management within mobile networks
    9.
    发明授权
    Handling errors in subscriber session management within mobile networks 有权
    处理移动网络中用户会话管理中的错误

    公开(公告)号:US08855071B1

    公开(公告)日:2014-10-07

    申请号:US13343614

    申请日:2012-01-04

    CPC classification number: H04W76/11 H04W76/12

    Abstract: In general, techniques are described for handling errors in subscriber session management within mobile networks. A downstream mobile gateway comprising a forwarding unit and a service unit may implement the techniques. The forwarding unit receives a packet that includes a destination address for a subscriber and a tunnel endpoint identifier (TEID). The service unit determines whether the TEID is associated with one of a number of subscriber records that store session data for current sessions associated with subscriber devices to communicate with the mobile network. In response to determining that the TEID is not associated with one of the subscriber records, the service unit generates a message that includes the TEID and the destination address and indicates that the downstream mobile gateway has determined that the TEID is not associated with one of the subscriber records. The forwarding unit then sends the message to the upstream mobile gateway.

    Abstract translation: 通常,描述了用于处理移动网络内用户会话管理中的错误的技术。 包括转发单元和服务单元的下游移动网关可以实现这些技术。 转发单元接收包括用户的目的地地址和隧道端点标识符(TEID)的分组。 服务单元确定TEID是否与存储与用户设备相关联的当前会话的会话数据的多个订户记录之一相关联以与移动网络进行通信。 响应于确定TEID不与订户记录中的一个相关联,服务单元生成包括TEID和目的地地址的消息,并且指示下游移动网关已经确定TEID不与其中的一个相关联 用户记录。 转发单元然后将消息发送到上游移动网关。

    CONNECTING MULTIPLE CUSTOMER SITES OVER A WIDE AREA NETWORK USING AN OVERLAY NETWORK
    10.
    发明申请
    CONNECTING MULTIPLE CUSTOMER SITES OVER A WIDE AREA NETWORK USING AN OVERLAY NETWORK 有权
    使用覆盖网络连接多个区域网络的多个客户站点

    公开(公告)号:US20140198794A1

    公开(公告)日:2014-07-17

    申请号:US14150640

    申请日:2014-01-08

    Abstract: A method and apparatus for connecting multiple customer sites over a wide area network (WAN) using an overlay network is described. In one embodiment of the invention, each one of multiple customer edge (CE) routers establishes a Border Gateway Protocol (BGP) session with one or more BGP route reflectors and announces their private IP network prefixes and one or more transport IP addresses to reach that CE router. The BGP route reflector(s) reflect those IP network prefixes and the one or more transport IP addresses to reach that specific CE router to the other CE routers. The CE routers receive those reflected IP network prefixes and the corresponding transport IP address(es) to reach that CE router in which those IP network prefixes belong and register them in their corresponding routing/forwarding data structures. In this way, the CE routers learn how to reach each other.

    Abstract translation: 描述了使用覆盖网络在广域网(WAN)上连接多个客户站点的方法和装置。 在本发明的一个实施例中,多个客户边缘(CE)路由器中的每一个路由器与一个或多个BGP路由反射器建立边界网关协议(BGP)会话,并且宣布其专用IP网络前缀和一个或多个传输IP地址以达到该 CE路由器 BGP路由反射器反映这些IP网络前缀和一个或多个传输IP地址,以到达其他CE路由器的特定CE路由器。 CE路由器接收到这些反映的IP网络前缀和相应的传输IP地址,以到达那些IP网络前缀所属的CE路由器,并将其注册到相应的路由/转发数据结构中。 以这种方式,CE路由器学习如何相互接触。

Patent Agency Ranking