Minimizing latency in live virtual server migration
    1.
    发明授权
    Minimizing latency in live virtual server migration 有权
    实时虚拟服务器迁移中的延迟最小化

    公开(公告)号:US08745204B2

    公开(公告)日:2014-06-03

    申请号:US12722596

    申请日:2010-03-12

    IPC分类号: G06F15/173

    CPC分类号: G06F9/4856 H04L67/148

    摘要: Techniques are provided to facilitate faster live migration of a virtual server from one physical server to another physical server by pausing IO activity of the virtual server and slowing memory state changes for CPU-bound activity of the virtual server during the live migration.

    摘要翻译: 提供了技术,通过暂停虚拟服务器的IO活动,减慢虚拟服务器在实时迁移期间CPU限制活动的内存状态更改,从而实现虚拟服务器从一个物理服务器到另一个物理服务器的实时迁移。

    Solution for handling URL-substitution for data access in a private network architecture
    2.
    发明授权
    Solution for handling URL-substitution for data access in a private network architecture 有权
    用于处理专用网络架构中数据访问的URL替换的解决方案

    公开(公告)号:US08078739B1

    公开(公告)日:2011-12-13

    申请号:US10750513

    申请日:2003-12-29

    IPC分类号: G06F15/16

    CPC分类号: H04L63/0209 H04L63/10

    摘要: Disclosed are methods and apparatus for handling requests for data from a private network. In general terms, a client who wishes access to secure data, such as a secure web page, from a private network establishes a secure connection with a secure server, such as a secure socket layer (SSL) server, of the private network. The secure server then downloads a software program for handling data requests (made by the client for data located within the private network) to the client. This software program is downloaded automatically by the secure server to the client when the client initiates a secure connection with such secure server. The downloaded software program is generally configured to modify data requests (e.g., by performing a URL substitution) sent from the client to an internal server of the private network such that the data requests are redirected to the secure server. The secure server then processes the data request (e.g., by retrieving the data from the appropriate internal server).

    摘要翻译: 公开了用于处理来自专用网络的数据请求的方法和装置。 一般来说,希望从专用网络访问安全数据(例如安全网页)的客户端建立与专用网络的安全服务器(例如安全套接字层(SSL))服务器的安全连接。 然后,安全服务器下载用于处理对客户端的数据请求(由客户端针对专用网络内的数据进行)的软件程序。 当客户端启动与这种安全服务器的安全连接时,该软件程序由安全服务器自动下载到客户端。 下载的软件程序通常被配置为修改从客户端发送到私有网络的内部服务器的数据请求(例如,通过执行URL替换),使得数据请求被重定向到安全服务器。 然后,安全服务器处理数据请求(例如,通过从适当的内部服务器检索数据)。

    Mechanisms for providing connectivity in NAT redundant/fail-over scenarios in unshared address-space
    4.
    发明申请
    Mechanisms for providing connectivity in NAT redundant/fail-over scenarios in unshared address-space 有权
    在非共享地址空间中的NAT冗余/故障转移场景中提供连接的机制

    公开(公告)号:US20070019540A1

    公开(公告)日:2007-01-25

    申请号:US11189478

    申请日:2005-07-25

    IPC分类号: H04J3/14 H04L12/56

    摘要: Disclosed are methods and apparatus for facilitating reliable session based communication with a local host via a subnet of redundant network devices that also implement network address translation (NAT) or the like. In general, embodiments of the present invention include mechanisms for reestablishing access to a local host after the local host's active network device has failed and been replaced by a new active network device with an address space that differs from the failed network device. In this invention, the network devices associated with the same local host also implement NAT, or the like. In brief, for each of its associated local hosts, the new active network device causes an address server to be updated with a new public address that is assigned from its address space to the local host. This update allows other remote hosts access to the local hosts by obtaining the updated address information from the address server. Communication sessions that were established prior to the failing active network device may also be retained by the new active network device. In this aspect, for each ongoing particular session between a remote host and a local host of the new active network device, the new active network device updates the remote host with a new public address assigned to local host for use in the particular session.

    摘要翻译: 公开了用于通过还实现网络地址转换(NAT)等的冗余网络设备的子网来促进与本地主机的基于会话的通信的方法和装置。 通常,本发明的实施例包括在本地主机的活动网络设备发生故障之后重新建立对本地主机的访问的机制,并且被具有不同于故障网络设备的地址空间的新的活动网络设备所替代。 在本发明中,与同一本地主机相关联的网络设备也实现NAT等。 简而言之,对于每个相关联的本地主机,新的活动网络设备使得使用从其地址空间分配给本地主机的新的公共地址来更新地址服务器。 此更新允许其他远程主机通过从地址服务器获取更新的地址信息来访问本地主机。 在故障的活动网络设备之前建立的通信会话也可以由新的活动网络设备保留。 在这方面,对于远程主机和新的活动网络设备的本地主机之间的每个正在进行的特定会话,新的活动网络设备使用分配给本地主机的新的公共地址来更新远程主机以在特定会话中使用。

    Method and apparatus for reducing flooding in bridged networks
    5.
    发明授权
    Method and apparatus for reducing flooding in bridged networks 有权
    减少桥接网络洪水的方法和装置

    公开(公告)号:US07116672B1

    公开(公告)日:2006-10-03

    申请号:US09545272

    申请日:2000-04-07

    申请人: Senthil Sivakumar

    发明人: Senthil Sivakumar

    IPC分类号: H04L12/56

    摘要: A method and apparatus for reducing flooding in a bridged network. The invention generally allows broadcast flooding for a predefined limited time period to permit mapping of a MAC address to a port by the bridge and disallows broadcast flooding for a second predefined time period. After the second time period expires, the process is repeated to allow the bridge to flood the networks for the predefined limited time period again. The bridge allows or disallows broadcasts flooding independently based on the destination MAC address.

    摘要翻译: 一种用于减少桥接网络中的洪泛的方法和装置。 本发明通常允许在预定义的有限时间段内进行广播洪泛以允许桥接器将MAC地址映射到端口,并且在第二预定时间段内不允许广播洪泛。 在第二时间段到期后,重复该过程以允许桥接器再次在预定义的有限时间段内对网络进行泛洪。 桥接器允许或不允许基于目的地MAC地址独立地广播广播。

    Method and apparatus for handling embedded addresses in data sent through multiple network address translation (NAT) devices
    6.
    发明授权
    Method and apparatus for handling embedded addresses in data sent through multiple network address translation (NAT) devices 有权
    用于处理通过多个网络地址转换(NAT)设备发送的数据中的嵌入式地址的方法和装置

    公开(公告)号:US07957382B1

    公开(公告)日:2011-06-07

    申请号:US11549341

    申请日:2006-10-13

    IPC分类号: H04L12/28

    CPC分类号: H04L29/1233 H04L61/25

    摘要: Disclosed are methods and apparatus for handling data containing embedded addresses. In general terms, prior to transmission of data having an embedded address or port, an initiating host sends a NAT Probe to an end-host with which the initiating host wishes to communicate. The NAT Probe includes the embedded address or port and a type indicating that translation of the address and/or port is requested if needed. As the NAT Probe traverses through one or more NAT devices as it is transmitted to the end-host, each NAT device is enabled to recognize the NAT Probe type and translate the embedded address and/or port, depending upon the individual NAT device's configuration. When the NAT Probe reaches the final hop NAT device or end-host, a NAT Probe Reply is sent back to the initiating host. The NAT Probe Reply contains a translated embedded address and/or port which is compatible with the end-host's network. The NAT Probe Reply also contains a type which differs from the type of the NAT Probe. As the NAT Probe Reply traverses back through the same NAT devices, the NAT device recognize the type of the NAT Probe Reply and do not translate the embedded address and/or port.

    摘要翻译: 公开了用于处理包含嵌入地址的数据的方法和装置。 一般来说,在传输具有嵌入式地址或端口的数据之前,发起主机向发起主机希望通信的终端主机发送NAT探测器。 NAT探测器包括嵌入式地址或端口以及指示如果需要,请求转换地址和/或端口的类型。 由于NAT探测器通过一个或多个NAT设备传输到终端主机时,每个NAT设备都可以识别NAT探测器类型,并根据各个NAT设备的配置转换嵌入式地址和/或端口。 当NAT探测器到达最终跳转NAT设备或终端主机时,NAT探测回复将发送回发起主机。 NAT探测回复包含与终端主机网络兼容的已翻译的嵌入式地址和/或端口。 NAT探测应答还包含一种不同于NAT探测器类型的类型。 由于NAT探测回复通过相同的NAT设备,NAT设备识别NAT探测回复的类型,并且不转换嵌入式地址和/或端口。

    Preventing network denial of service attacks by early discard of out-of-order segments
    9.
    发明申请
    Preventing network denial of service attacks by early discard of out-of-order segments 有权
    通过早期丢弃无序段来防止网络拒绝服务攻击

    公开(公告)号:US20070180533A1

    公开(公告)日:2007-08-02

    申请号:US11345999

    申请日:2006-02-01

    IPC分类号: H04N7/16

    摘要: A method of preventing network denial of service attacks by early discard of out-of-order segments comprises creating a reassembly queue for a connection between a first network node and a second network node, wherein the connection has been established based on a transport-layer network protocol, the reassembly queue having a size based on a buffer size of an input interface with which the connection is associated. As out-of-order data segments arrive on the connection, and before other processing of the segments, whether the reassembly queue is full is determined, and the out-of-order segments are discarded if the reassembly queue is full. The size of the reassembly queue is automatically changed in response to one or more changes in any of network conditions and device resources.

    摘要翻译: 通过早期丢弃无序段来防止网络拒绝服务攻击的方法包括为第一网络节点和第二网络节点之间的连接创建重组队列,其中已经基于传输层建立了连接 网络协议,所述重组队列具有基于与所述连接相关联的输入接口的缓冲器大小的大小。 由于无序数据段到达连接,并且在段的其他处理之前,确定重新组装队列是否已满,并且如果重新组装队列已满,则会丢弃无序段。 响应于任何网络条件和设备资源中的一个或多个更改,自动更改重组队列的大小。

    Method and apparatus for handling embedded address in data sent through multiple network address translation (NAT) devices
    10.
    发明授权
    Method and apparatus for handling embedded address in data sent through multiple network address translation (NAT) devices 有权
    用于处理通过多个网络地址转换(NAT)设备发送的数据中的嵌入地址的方法和装置

    公开(公告)号:US07139841B1

    公开(公告)日:2006-11-21

    申请号:US10202973

    申请日:2002-07-24

    IPC分类号: G06F15/16 H04L12/28 H04L12/18

    CPC分类号: H04L29/1233 H04L61/25

    摘要: Disclosed are methods and apparatus for handling data containing embedded addresses. In general terms, prior to transmission of data having an embedded address or port, an initiating host sends a NAT Probe to an end-host with which the initiating host wishes to communicate. The NAT Probe includes the embedded address or port and a type indicating that translation of the address and/or port is requested if needed. As the NAT Probe traverses through one or more NAT devices as it is transmitted to the end-host, each NAT device is enabled to recognize the NAT Probe type and translate the embedded address and/or port, depending upon the individual NAT device's configuration. When the NAT Probe reaches the final hop NAT device or end-host, a NAT Probe Reply is sent back to the initiating host. The NAT Probe Reply contains a translated embedded address and/or port which is compatible with the end-host's network. The NAT Probe Reply also contains a type which differs from the type of the NAT Probe. As the NAT Probe Reply traverses back through the same NAT devices, the NAT device recognize the type of the NAT Probe Reply and do not translate the embedded address and/or port. The initiating host may then use the translated embedded address and/or port for subsequent communication with the end-host. That is, the initiating host sends data having the translated embedded address and/or port to the end-host. Since the translated address and/port is compatible with the end-host's network, the NAT devices through which the data passes do not have to inspect the payload of the data to handle or translate the embedded address and/or port.

    摘要翻译: 公开了用于处理包含嵌入地址的数据的方法和装置。 一般来说,在传输具有嵌入式地址或端口的数据之前,发起主机向发起主机希望通信的终端主机发送NAT探测器。 NAT探测器包括嵌入式地址或端口以及指示如果需要,请求转换地址和/或端口的类型。 由于NAT探测器通过一个或多个NAT设备传输到终端主机时,每个NAT设备都可以识别NAT探测器类型,并根据各个NAT设备的配置转换嵌入式地址和/或端口。 当NAT探测器到达最终跳转NAT设备或终端主机时,NAT探测回复将发送回发起主机。 NAT探测回复包含与终端主机网络兼容的已翻译的嵌入式地址和/或端口。 NAT探测应答还包含一种不同于NAT探测器类型的类型。 由于NAT探测回复通过相同的NAT设备,NAT设备识别NAT探测回复的类型,并且不转换嵌入式地址和/或端口。 然后,发起主机可以使用翻译的嵌入式地址和/或端口用于与终端主机的后续通信。 也就是说,发起主机将具有翻译的嵌入式地址和/或端口的数据发送到终端主机。 由于翻译的地址和/端口与终端主机的网络兼容,数据通过的NAT设备不必检查数据的有效负载来处理或翻译嵌入式地址和/或端口。