公开(公告)号：US20130041934A1

公开(公告)日：2013-02-14

申请号：US13431766

申请日：2012-03-27

申请人： Saravana Annamalaisami ,  Mahesh Mylarappa ,  Sudheer Thokala ,  Vamsi Korrapatti ,  Sridhar Guthula ,  Rajesh Joshi ,  Ashwin Jagdish

发明人： Saravana Annamalaisami ,  Mahesh Mylarappa ,  Sudheer Thokala ,  Vamsi Korrapatti ,  Sridhar Guthula ,  Rajesh Joshi ,  Ashwin Jagdish

IPC分类号： G06F15/16

CPC分类号： H04L43/026 ,  H04L29/06 ,  H04L43/04 ,  H04L45/38 ,  H04L47/10 ,  H04L47/12 ,  H04L47/19 ,  H04L47/193 ,  H04L47/2441 ,  H04L47/2483 ,  H04L47/41 ,  H04L63/1425 ,  H04L67/146 ,  Y02D50/30

摘要： The present disclosure is directed towards tracking application layer flow via a multi-connection intermediary. Transaction level or application layer information may be tracked via the intermediary, including one or more of: (i) the request method; (ii) response codes; (iii) URLs; (iv) HTTP cookies; (v) RTT of both ends of the transaction in a quad flow arrangement; (vi) server time to provide first byte of a communication; (vii) server time to provide the last byte of a communication; (viii) flow flags; or any other type and form of transaction level data may be captured, exported, and analyzed. The application layer flow or transaction level information may be provided in an IPFIX-compliant data record. This may be done to provide template-based data record definition, as well as providing data on an application or transaction level of granularity.

摘要翻译： 本公开旨在经由多连接中介追踪应用层流。 交易级别或应用层信息可以通过中介跟踪，包括以下中的一个或多个：（i）请求方法; （ii）响应码; （iii）网址; （iv）HTTP cookie; （v）交易的两端的RTT以四流排列; （vi）提供通信的第一字节的服务器时间; （vii）服务器时间提供通信的最后一个字节; （viii）流标; 或任何其他类型和形式的交易级数据可以被捕获，导出和分析。 可以在符合IPFIX的数据记录中提供应用层流或事务级别信息。 这样做可以提供基于模板的数据记录定义，以及提供关于应用程序或事务级别的粒度的数据。

公开(公告)号：US20120250530A1

公开(公告)日：2012-10-04

申请号：US13073705

申请日：2011-03-28

申请人： Ashok Kumar Jagadeeswaran ,  Saravana Annamalaisami

发明人： Ashok Kumar Jagadeeswaran ,  Saravana Annamalaisami

IPC分类号： H04L12/26

CPC分类号： H04L65/605 ,  H04L43/04 ,  H04L43/08 ,  H04L47/36 ,  H04L67/1008 ,  H04L67/1023 ,  H04L69/166

摘要： The virtual Server (vServer) of an intermediary device deployed between a plurality of clients and services supports parameters for setting maximum segment size (MSS) on a per vServer/service basis and for automatically learning the MSS among the back-end services. In case of vServer/service setting, all vServers will use the MSS value set through the parameter for the MSS value set in TCP SYN+ACK to clients. In the case of learning mode, the backend service MSS will be learnt through monitor probing. The vServer will monitor and learn the MSS that is being frequently used by the services. When the learning is active, the intermediary device may keep statistics of the MSS of backend services picked up during load balancing decisions and once an interval timer expires, the MSS value may be picked by a majority and set on the vServer. If there is no majority, then the highest MSS is picked up to be set on the vServer.

摘要翻译： 部署在多个客户端和服务之间的中间设备的虚拟服务器（vServer）支持用于在每个vServer /服务基础上设置最大段大小（MSS）的参数，并用于在后端服务中自动学习MSS。 在vServer /服务设置的情况下，所有vServer将使用通过该参数设置的MSS值，以将TCP SYN + ACK中设置的MSS值设置为客户端。 在学习模式的情况下，后端服务MSS将通过监视器探测来学习。 vServer将监视和学习服务频繁使用的MSS。 当学习活动时，中介设备可以保持负载均衡决策期间所接收的后台服务的MSS的统计信息，并且一旦间隔定时器到期，则MSS值可以通过多数被选择并设置在vServer上。 如果没有多数，那么最高的MSS被拾取在vServer上设置。

公开(公告)号：US20120250512A1

公开(公告)日：2012-10-04

申请号：US13073709

申请日：2011-03-28

申请人： ASHOK KUMAR JAGADEESWARAN ,  Saravana Annamalaisami ,  Ramanjaneyulu Talla ,  Jyotheesh Rao Kurma ,  Mohit Saxena

发明人： ASHOK KUMAR JAGADEESWARAN ,  Saravana Annamalaisami ,  Ramanjaneyulu Talla ,  Jyotheesh Rao Kurma ,  Mohit Saxena

IPC分类号： H04L12/26

CPC分类号： H04L47/30 ,  H04L47/12 ,  H04L47/17

摘要： The present solution is directed to a system for handling network interface card (NIC) congestion by a NIC aware application. The system may include a device having a plurality of network interface cards (NICs), a transmission queue corresponding to a NIC of the plurality of NICs; and an overflow queue for storing packets for the NIC when congested. The system may also include an application executing on the device outputting a plurality of packets to the transmission queue responsive to detecting that the NIC is identified as not congested. The device identifies the NIC as congested responsive to determining that a number of packets stored in the transmission queue has reached a predetermined threshold and responsive to detecting identification of the NIC as congested, the application stores one or more packets to the overflow queue. The device transmits one or more of the plurality of packets stored in the transmission queue and transmits a predetermined number of packets from the overflow queue.

摘要翻译： 本解决方案涉及用于由NIC感知应用处理网络接口卡（NIC）拥塞的系统。 该系统可以包括具有多个网络接口卡（NIC）的设备，对应于多个NIC的NIC的传输队列; 以及用于在拥塞时为NIC存储数据包的溢出队列。 响应于检测到NIC被识别为不拥塞，系统还可以包括在设备上执行的应用向输送队列输出多个分组。 响应于确定存储在传输队列中的数量的分组已经达到预定的阈值并且响应于将NIC的识别检测为拥塞，该设备将NIC识别为拥塞，该应用将一个或多个分组存储到溢出队列。 设备发送存储在传输队列中的多个分组中的一个或多个分组，并从溢出队列发送预定数量的分组。

公开(公告)号：US20080005203A1

公开(公告)日：2008-01-03

申请号：US11428058

申请日：2006-06-30

申请人： Henk Bots ,  Srikanth Devarajan ,  Saravana Annamalaisami

发明人： Henk Bots ,  Srikanth Devarajan ,  Saravana Annamalaisami

IPC分类号： G06F17/30

CPC分类号： H04L67/06 ,  G06F17/2211 ,  H04L67/1097 ,  Y10S707/99948 ,  Y10S707/99955 ,  Y10S707/99956

摘要： Systems and methods for reducing file sizes for files delivered over a network are disclosed. A method comprises receiving a first file comprising sequences of data; creating a hash table having entries corresponding to overlapping sequences of data; receiving a second file comprising sequences of data; comparing each of the sequences of data in the second file to the sequences of data in the hash table to determine sequences of data present in both the first and second files; and creating a third file comprising sequences of data from the second file and representations of locations and lengths of said sequences of data present in both the first and second files.

摘要翻译： 公开了用于减少通过网络传送的文件的文件大小的系统和方法。 一种方法包括：接收包括数据序列的第一文件; 创建具有对应于重叠数据序列的条目的哈希表; 接收包括数据序列的第二文件; 将第二文件中的数据序列中的每一个与散列表中的数据序列进行比较，以确定存在于第一和第二文件中的数据序列; 以及创建包括来自所述第二文件的数据序列的第三文件以及存在于所述第一和第二文件中的所述数据序列的位置和长度的表示。

公开(公告)号：US20060195660A1

公开(公告)日：2006-08-31

申请号：US11323196

申请日：2005-12-30

申请人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K R ,  Anil Kumar

发明人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K R ,  Anil Kumar

IPC分类号： G06F12/14 ,  G06F13/28 ,  G06F12/00 ,  G06F12/16

CPC分类号： H04L67/2852 ,  H04L69/329

摘要： The present invention is directed towards a method and system for modifying by a cache responses from a server that do not identify a dynamically generated object as cacheable to identify the dynamically generated object to a client as cacheable in the response. In some embodiments, such as an embodiment handling HTTP requests and responses for objects, the techniques of the present invention insert an entity tag, or “etag” into the response to provide cache control for objects provided without entity tags and/or cache control information from an originating server. This technique of the present invention provides an increase in cache hit rates by inserting information, such as entity tag and cache control information for an object, in a response to a client to enable the cache to check for a hit in a subsequent request.

摘要翻译： 本发明涉及一种用于通过来自服务器的高速缓存响应进行修改的方法和系统，所述响应不将动态生成的对象标识为可缓存，以将响应中的动态生成的对象标识为可缓存的客户端。 在一些实施例中，诸如处理对象的HTTP请求和响应的实施例，本发明的技术将实体标签或“etag”插入到响应中，以为没有实体标签和/或高速缓存控制信息提供的对象提供高速缓存控制 从始发服务器。 本发明的这种技术通过在对客户机的响应中插入诸如实体标签和对象的高速缓存控制信息的信息来提供高速缓存命中率，从而使高速缓存能够检查后续请求中的命中。

公开(公告)号：US09015304B2

公开(公告)日：2015-04-21

申请号：US13525042

申请日：2012-06-15

申请人： Saravana Annamalaisami ,  Raveendra Holla ,  Nishant Kumar Jain ,  Sharvari Mithyantha ,  Dhiraj Gedam

发明人： Saravana Annamalaisami ,  Raveendra Holla ,  Nishant Kumar Jain ,  Sharvari Mithyantha ,  Dhiraj Gedam

IPC分类号： G06F15/173 ,  G06F15/16 ,  H04L12/24 ,  H04L29/08

CPC分类号： H04L41/0213 ,  H04L41/042 ,  H04L41/046 ,  H04L67/10 ,  H04L67/288

摘要： The present disclosure is directed towards systems and methods for supporting Simple Network Management Protocol (SNMP) request operations over clustered networking devices. The system includes a cluster that includes a plurality of intermediary devices and an SNMP agent executing on a first intermediary device of the plurality of intermediary devices. The SNMP agent receives an SNMP GETNEXT request for an entity. Responsive to receipt of the SNMP GETNEXT request, the SNMP agent requests a next entity from each intermediary device of the plurality of intermediary devices of the cluster. To respond to the SNMP request, the SNMP agent selects a lexicographically minimum entity. The SNMP agent may select the lexicographically minimum entity from a plurality of next entities received via responses from each intermediary device of the plurality of intermediary devices.

摘要翻译： 本公开涉及用于支持通过集群网络设备的简单网络管理协议（SNMP）请求操作的系统和方法。 该系统包括一组包括多个中间装置和在多个中间装置的第一中介装置上执行的SNMP代理。 SNMP代理接收一个实体的SNMP GETNEXT请求。 响应于接收到SNMP GETNEXT请求，SNMP代理从集群的多个中间设备的每个中间设备请求下一个实体。 为了响应SNMP请求，SNMP代理选择一个字典最小实体。 SNMP代理可以从通过多个中间设备的每个中间设备的响应接收的多个下一个实体中选择词典上的最小实体。

公开(公告)号：US08769067B2

公开(公告)日：2014-07-01

申请号：US12489249

申请日：2009-06-22

申请人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

发明人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

IPC分类号： G06F15/173

CPC分类号： H04L43/04 ,  H04L49/90

摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.

摘要翻译： 公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。 在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。 合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。 整合器可以向每个分组引擎发送消息以更新该组计数器值。 合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。 每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

公开(公告)号：US08745266B2

公开(公告)日：2014-06-03

申请号：US13173216

申请日：2011-06-30

申请人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

发明人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L45/306 ,  H04L29/08 ,  H04L45/74 ,  H04L61/103 ,  H04L61/1511 ,  H04L63/02 ,  H04L63/0815 ,  H04L67/2814

摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.

摘要翻译： 本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端 请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。 服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型 以及本文描述的服务或设备的形式。 中间设备可以选择机器来处理请求，并使用第2层重定向到机器。 中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。 一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。 响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。 并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

公开(公告)号：US08644157B2

公开(公告)日：2014-02-04

申请号：US13073709

申请日：2011-03-28

申请人： Ashok Kumar Jagadeeswaran ,  Saravana Annamalaisami ,  Ramanjaneyulu Talla ,  Jyotheesh Rao Kurma ,  Mohit Saxena

发明人： Ashok Kumar Jagadeeswaran ,  Saravana Annamalaisami ,  Ramanjaneyulu Talla ,  Jyotheesh Rao Kurma ,  Mohit Saxena

IPC分类号： H04L1/00

CPC分类号： H04L47/30 ,  H04L47/12 ,  H04L47/17

摘要： The present solution is directed to a system for handling network interface card (NIC) congestion by a NIC aware application. The system may include a device having a plurality of network interface cards (NICs), a transmission queue corresponding to a NIC of the plurality of NICs; and an overflow queue for storing packets for the NIC when congested. The system may also include an application executing on the device outputting a plurality of packets to the transmission queue responsive to detecting that the NIC is identified as not congested. The device identifies the NIC as congested responsive to determining that a number of packets stored in the transmission queue has reached a predetermined threshold and responsive to detecting identification of the NIC as congested, the application stores one or more packets to the overflow queue. The device transmits one or more of the plurality of packets stored in the transmission queue and transmits a predetermined number of packets from the overflow queue.

摘要翻译： 本解决方案涉及用于由NIC感知应用处理网络接口卡（NIC）拥塞的系统。 该系统可以包括具有多个网络接口卡（NIC）的设备，对应于多个NIC的NIC的传输队列; 以及用于在拥塞时为NIC存储数据包的溢出队列。 响应于检测到NIC被识别为不拥塞，系统还可以包括在设备上执行的应用向输送队列输出多个分组。 响应于确定存储在传输队列中的数量的分组已经达到预定的阈值并且响应于将NIC的识别检测为拥塞，该设备将NIC识别为拥塞，该应用将一个或多个分组存储到溢出队列。 设备发送存储在传输队列中的多个分组中的一个或多个分组，并从溢出队列发送预定数量的分组。

公开(公告)号：US08495305B2

公开(公告)日：2013-07-23

申请号：US11324131

申请日：2005-12-30

申请人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K.R. ,  Anil Kumar

发明人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K.R. ,  Anil Kumar

IPC分类号： G06F12/00

CPC分类号： H04L67/42 ,  G06F17/30902

摘要： A method for maintaining a cache of dynamically generated objects. The method includes storing in the cache dynamically generated objects previously served from an originating server to a client. A communication between the client and server is intercepted by the cache. The cache parses the communication to identify an object determinant and to determine whether the object determinant indicates whether a change has occurred or will occur in an object at the originating server. The cache marks the object stored in the cache as invalid if the object determinant so indicates. If the object has been marked as invalid, the cache retrieves the object from the originating server.

摘要翻译： 一种用于维护动态生成的对象的缓存的方法。 该方法包括将先前从始发服务器提供的动态生成的对象存储到缓存器中。 客户端和服务器之间的通信被缓存拦截。 高速缓存解析通信以识别对象行列式，并且确定对象行列式是否指示发生服务器上的对象是否已发生或将发生更改。 如果对象行列式指示，高速缓存将存储在缓存中的对象标记为无效。 如果对象被标记为无效，缓存将从始发服务器检索该对象。