公开(公告)号：US08086845B2

公开(公告)日：2011-12-27

申请号：US11561947

申请日：2006-11-21

Applicant: Vikas Jain ,  Madan Appiah ,  Kadirvel Chockalingam Vanniarajan ,  Samir Jain

Inventor： Vikas Jain ,  Madan Appiah ,  Kadirvel Chockalingam Vanniarajan ,  Samir Jain

IPC: H04L29/06

CPC classification number: H04L63/029 ,  H04L63/168 ,  H04L67/02 ,  H04L67/14 ,  H04L67/141 ,  H04L67/145 ,  H04L69/16 ,  H04L69/162

Abstract: Many secure tunnels require protocols that require special handling, authorization or security certificates, such as L2TP and PPTP. This often eliminates them for use between a corporate or agency network and outside, public networks. A secure socket tunnel protocol (SSTP) adds drivers in both the kernel and user mode to route standard protocol traffic, such as PPP, over a common HTTPS port. In the event of network interruptions, an exchange of a session cookie allows fast reconnection of the underlying HTTPS connection without affecting higher level applications.

Abstract translation: 许多安全隧道需要需要特殊处理，授权或安全证书的协议，例如L2TP和PPTP。 这通常会消除他们在公司或代理商网络和外部公共网络之间使用。 安全套接字隧道协议（SSTP）在内核和用户模式下添加驱动程序，通过普通HTTPS端口路由标准协议流量（如PPP）。 在网络中断的情况下，交换会话cookie可以快速重新连接底层HTTPS连接，而不会影响更高级别的应用程序。

公开(公告)号：US08111690B2

公开(公告)日：2012-02-07

申请号：US12260524

申请日：2008-10-29

Applicant: Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

Inventor： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

IPC: H04L12/56

CPC classification number: H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

Abstract translation: 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，建立流数据结构，其识别与基于虚拟路由器的网络设备中的多个虚拟路由器相关联的当前分组流。 当基于虚拟路由器的网络设备接收到传入分组时，通过基于与输入分组相关联的报头访问流数据结构来确定输入分组是否与当前分组流相关联。 如果确定进入的分组与当前分组流相关联，则进入的分组是经由基于虚拟路由器的网络设备的网络接口的硬件转发的，而不是由基于虚拟路由器的网络设备的处理器进行干预 传入的分组被转发到处理器上的软件用于流学习。

公开(公告)号：US07177311B1

公开(公告)日：2007-02-13

申请号：US10163079

申请日：2002-06-04

Applicant: Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

Inventor： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

IPC: H04L12/56

CPC classification number: H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

Abstract: A method for routing packets in a router includes establishing a flow data structure identifying a packet flow through a virtual router in the router. Next, a system executing the method receives a packet, said packet having at least one packet header. The method then compares a subset of the at least one packet header to a subset of the flow data structure. If the subset of the at least one packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet can be either dropped, or forwarded to a general purpose processor for processing.

Abstract translation: 在路由器中路由分组的方法包括建立标识通过路由器中的虚拟路由器的分组流的流数据结构。 接下来，执行该方法的系统接收分组，所述分组具有至少一个分组报头。 该方法然后将至少一个分组报头的子集与流数据结构的子集进行比较。 如果至少一个分组报头的子集与流数据结构的子集匹配，则该分组可以硬件加速到网络接口。 否则，可以将数据包丢弃或转发到通用处理器进行处理。

公开(公告)号：US07522604B2

公开(公告)日：2009-04-21

申请号：US11671462

申请日：2007-02-05

Applicant: Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

Inventor： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Greg Lockwood ,  Tim Millet

IPC: H04L12/28

CPC classification number: H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.

Abstract translation: 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，用于在路由器中路由分组的方法包括建立流数据结构，其识别路由器中的虚拟路由器的分组流。 当接收到分组时，在与分组相关联的至少一个分组报头的子集与流数据结构的子集之间执行比较。 如果分组报头的子集与流数据结构的子集匹配，则该分组可以被硬件加速到网络接口。 否则，可以将分组丢弃或转发到通用处理器进行处理。

公开(公告)号：US20090073977A1

公开(公告)日：2009-03-19

申请号：US12260524

申请日：2008-10-29

Applicant: Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

Inventor： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

IPC: H04L12/56

CPC classification number: H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

Abstract translation: 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，建立流数据结构，其识别与基于虚拟路由器的网络设备中的多个虚拟路由器相关联的当前分组流。 当基于虚拟路由器的网络设备接收到传入分组时，通过基于与输入分组相关联的报头访问流数据结构来确定输入分组是否与当前分组流相关联。 如果确定进入的分组与当前分组流相关联，则进入的分组是经由基于虚拟路由器的网络设备的网络接口的硬件转发的，而不是由基于虚拟路由器的网络设备的处理器进行干预 传入的分组被转发到处理器上的软件用于流学习。

公开(公告)号：US08370623B2

公开(公告)日：2013-02-05

申请号：US13323393

申请日：2011-12-12

Applicant: Vikas Jain ,  Madan Appiah ,  Kadirvel Vanniarajan ,  Samir Jain

Inventor： Vikas Jain ,  Madan Appiah ,  Kadirvel Vanniarajan ,  Samir Jain

IPC: H04L29/06

CPC classification number: H04L63/029 ,  H04L63/168 ,  H04L67/02 ,  H04L67/14 ,  H04L67/141 ,  H04L67/145 ,  H04L69/16 ,  H04L69/162

Abstract: Many secure tunnels require protocols that require special handling, authorization or security certificates, such as L2TP and PPTP. This often eliminates them for use between a corporate or agency network and outside, public networks. A secure socket tunnel protocol (SSTP) adds drivers in both the kernel and user mode to route standard protocol traffic, such as PPP, over a common HTTPS port. In the event of network interruptions, an exchange of a session cookie allows fast reconnection of the underlying HTTPS connection without affecting higher level applications.

Abstract translation: 许多安全隧道需要需要特殊处理，授权或安全证书的协议，例如L2TP和PPTP。 这通常会消除他们在公司或代理商网络和外部公共网络之间使用。 安全套接字隧道协议（SSTP）在内核和用户模式下添加驱动程序，通过普通HTTPS端口路由标准协议流量（如PPP）。 在网络中断的情况下，交换会话cookie可以快速重新连接底层HTTPS连接，而不会影响更高级别的应用程序。

公开(公告)号：US20120089828A1

公开(公告)日：2012-04-12

申请号：US13323393

申请日：2011-12-12

Applicant: Vikas Jain ,  Madan Appiah ,  Kadirvel Chockalingam Vanniarajan ,  Samir Jain

Inventor： Vikas Jain ,  Madan Appiah ,  Kadirvel Chockalingam Vanniarajan ,  Samir Jain

IPC: H04L29/06

CPC classification number: H04L63/029 ,  H04L63/168 ,  H04L67/02 ,  H04L67/14 ,  H04L67/141 ,  H04L67/145 ,  H04L69/16 ,  H04L69/162

Abstract: Many secure tunnels require protocols that require special handling, authorization or security certificates, such as L2TP and PPTP. This often eliminates them for use between a corporate or agency network and outside, public networks. A secure socket tunnel protocol (SSTP) adds drivers in both the kernel and user mode to route standard protocol traffic, such as PPP, over a common HTTPS port. In the event of network interruptions, an exchange of a session cookie allows fast reconnection of the underlying HTTPS connection without affecting higher level applications.

Abstract translation: 许多安全隧道需要需要特殊处理，授权或安全证书的协议，例如L2TP和PPTP。 这通常会消除他们在公司或代理网络和外部公共网络之间使用。 安全套接字隧道协议（SSTP）在内核和用户模式下添加驱动程序，通过普通HTTPS端口路由标准协议流量（如PPP）。 在网络中断的情况下，交换会话cookie可以快速重新连接底层HTTPS连接，而不会影响更高级别的应用程序。

公开(公告)号：US20080298366A1

公开(公告)日：2008-12-04

申请号：US11756354

申请日：2007-05-31

Applicant: Madan Mohan R. Appiah ,  Amit Chatterjee ,  Samir Jain

Inventor： Madan Mohan R. Appiah ,  Amit Chatterjee ,  Samir Jain

IPC: H04L12/56

CPC classification number: H04L47/10 ,  H04L45/38 ,  H04L47/193 ,  H04L47/20

Abstract: Procedures for agnostically redirecting WAN link communications for WAN link throughput optimization are described. In an example, a WAN communication, targeted to a remote resource, is redirected to a local port proxy. The local port proxy may enforce WAN link policy on the communication to optimize communication flows occurring over the physical WAN link thereby increasing the relative efficiency of the physical WAN link. A remote port proxy may be included for forwarding the communication to the target remote resource via a separate communication connection.

Abstract translation: 描述了用于WAN链路吞吐量优化的WAN链路通信的不可知重定向过程。 在一个示例中，针对远程资源的WAN通信被重定向到本地端口代理。 本地端口代理可以对通信实施WAN链路策略，以优化通过物理WAN链路发生的通信流，从而增加物理WAN链路的相对效率。 可以包括远程端口代理，用于经由单独的通信连接将通信转发到目标远程资源。

公开(公告)号：US20070127382A1

公开(公告)日：2007-06-07

申请号：US11671462

申请日：2007-02-05

Applicant: Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

Inventor： Zahid Hussain ,  Samir Jain ,  Naveed Alam ,  Joseph Cheng ,  Gregory Lockwood ,  Tim Millet

IPC: H04J1/16

CPC classification number: H04L45/00 ,  H04L45/586 ,  H04L45/742 ,  H04L49/252 ,  H04L49/505 ,  H04L49/70

Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.

Abstract translation: 提供了方法和系统，用于通过基于虚拟路由器的网络交换机路由流量。 根据一个实施例，用于在路由器中路由分组的方法包括建立流数据结构，其识别路由器中的虚拟路由器的分组流。 当接收到分组时，在与分组相关联的至少一个分组报头的子集与流数据结构的子集之间执行比较。 如果分组报头的子集与流数据结构的子集匹配，则该分组可以被硬件加速到网络接口。 否则，可以将分组丢弃或转发到通用处理器进行处理。

公开(公告)号：US20090262012A1

公开(公告)日：2009-10-22

申请号：US12103854

申请日：2008-04-16

Applicant: Paul Carlson ,  Samir Jain ,  Jill Ryan ,  Jeffrey Elrod ,  Roger Schmidt ,  Larry Wilson ,  Medwin Schreher

Inventor： Paul Carlson ,  Samir Jain ,  Jill Ryan ,  Jeffrey Elrod ,  Roger Schmidt ,  Larry Wilson ,  Medwin Schreher

IPC: G01S3/02 ,  G01S13/00 ,  G06K7/10

CPC classification number: G01J5/0003 ,  G01J5/0265 ,  G01J5/089 ,  G01J2005/0077

Abstract: A radiometer for measuring temperature data can include a data reader for reading target data associated with a measurement target and generating temperature data based on the target data. A temperature compensation system can include a radiometer with a data reader and one or more data tags placed proximate corresponding measurement targets. The data tags can contain target data including a target identifier and/or compensation data, among other data. The compensation data can include, for example, a target emissivity. In some embodiments the data reader can include an optical scanning device and/or an RFID reader.

Abstract translation: 用于测量温度数据的辐射计可以包括用于读取与测量目标相关联的目标数据并基于目标数据产生温度数据的数据读取器。 温度补偿系统可以包括具有数据读取器的辐射计和放置在相应测量目标附近的一个或多个数据标签。 数据标签可以包含目标数据，包括目标标识符和/或补偿数据，以及其他数据。 补偿数据可以包括例如目标发射率。 在一些实施例中，数据读取器可以包括光学扫描装置和/或RFID读取器。