Providing services for multiple virtual private networks
    4.
    发明授权
    Providing services for multiple virtual private networks 有权
    为多个虚拟专用网提供服务

    公开(公告)号:US07853714B1

    公开(公告)日:2010-12-14

    申请号:US11699721

    申请日:2007-01-29

    IPC分类号: G06F15/173

    摘要: A network device provides services for multiple virtual private networks (VPNs) via one or more virtual hosts. For example, a router receives packets from multiple VPNs, and communicates the packets to a service card via a logical interface in accordance with a forwarding information base. A virtual host within the service card processes the packets and provides a service for the network device from which the packet was sent. The virtual host may, for example, provide print services for network devices within a corresponding VPN. The virtual host acts, in essence, as a print server within the corresponding VPN. In this manner, the router may eliminate the need for the customer associated with the VPN to maintain print servers within remote customer sites.

    摘要翻译: 网络设备通过一个或多个虚拟主机为多个虚拟专用网络(VPN)提供服务。 例如,路由器从多个VPN接收数据包,并根据转发信息库通过逻辑接口将数据包传送到服务卡。 服务卡内的虚拟主机处理数据包,并为发送数据包的网络设备提供服务。 虚拟主机可以例如为对应的VPN内的网络设备提供打印服务。 虚拟主机本质上作为相应VPN内的打印服务器。 以这种方式,路由器可以消除对与VPN相关联的客户的需求,以维护远程客户站点内的打印服务器。

    Systems and methods for harvesting expired sessions
    5.
    发明授权
    Systems and methods for harvesting expired sessions 有权
    用于收获过期会话的系统和方法

    公开(公告)号:US07600008B1

    公开(公告)日:2009-10-06

    申请号:US10424794

    申请日:2003-04-29

    申请人: Spencer Greene

    发明人: Spencer Greene

    IPC分类号: G06F15/173

    CPC分类号: H04L67/14 H04L69/28

    摘要: A system harvests sessions in a network device. The system receives a first data unit associated with a session and installs the session in a first queue until expiration of a first time period. The system installs the session in a second queue until the occurrence of at least one of an expiration of a second time period and a receipt of a data unit associated with the session. The system harvests the session upon expiration of the second time period.

    摘要翻译: 系统收集网络设备中的会话。 系统接收与会话关联的第一数据单元,并将会话安装在第一队列中,直到第一时间段到期。 系统将会话安装在第二队列中,直到出现第二时间段的到期中的至少一个以及与会话相关联的数据单元的接收。 该系统在第二个时间段到期后收集会议。

    High throughput system for encryption and other data operations
    6.
    发明授权
    High throughput system for encryption and other data operations 有权
    用于加密和其他数据操作的高吞吐量系统

    公开(公告)号:US06870929B1

    公开(公告)日:2005-03-22

    申请号:US09470565

    申请日:1999-12-22

    申请人: Spencer Greene

    发明人: Spencer Greene

    CPC分类号: H04L9/0637 H04L2209/125

    摘要: According to one embodiment, an encryption system (500) includes an input buffer (504) that can provide data blocks from different contexts (522-1 to 522-n) to a selected encryption circuit (524-1 to 524-m) according to a scheduling section (502). A scheduling section (502) can include a register array (510) having rows that each correspond to a context and columns that correspond to an encryption circuit. Each register array (510) row can store one “hot” bit that designates a context with a particular encryption circuit. A column can be selected by a multiplexer (514) and its values prioritized and encoded by a priority encoder (518) to generate an address that results in the selection of a data block from a particular context. Priority may be varied by shifting a column value with a rotate circuit (516) according to an offset value (OFFSET).

    摘要翻译: 根据一个实施例,加密系统(500)包括输入缓冲器(504),其可以根据不同的上下文(522-1至522-n)向选定的加密电路(524-1至524-m)提供数据块, 到调度部分(502)。 调度部分(502)可以包括具有对应于上下文的行的寄存器阵列(510)和与加密电路对应的列。 每个寄存器阵列(510)行可以存储一个“热”位,其指定与特定加密电路的上下文。 可以由多路复用器(514)选择一列,并且由优先级编码器(518)对其值进行优先排序并编码,以生成导致从特定上下文中选择数据块的地址。 根据偏移值(OFFSET),通过用旋转电路(516)移动列值可以改变优先级。

    Measuring network traffic based on predicted amount of padding
    7.
    发明授权
    Measuring network traffic based on predicted amount of padding 有权
    根据预测的填充量测量网络流量

    公开(公告)号:US08521870B2

    公开(公告)日:2013-08-27

    申请号:US12906446

    申请日:2010-10-18

    申请人: Spencer Greene

    发明人: Spencer Greene

    IPC分类号: G06F15/173

    CPC分类号: H04L43/0876 H04L41/147

    摘要: A system measures traffic in a device. The system tracks an amount of data and the data units and predicts the amount of padding associated with the data units. The system determines the amount of traffic in the device based on the predicted padding, the amount of data, and the number of data units.

    摘要翻译: 系统测量设备中的流量。 系统跟踪数据量和数据单位,并预测与数据单元相关联的填充量。 该系统基于预测的填充,数据量和数据单元的数量来确定设备中的流量。

    Method and apparatus for multiple field matching in network device
    9.
    发明授权
    Method and apparatus for multiple field matching in network device 有权
    网络设备中多场匹配的方法和装置

    公开(公告)号:US06778530B1

    公开(公告)日:2004-08-17

    申请号:US09436439

    申请日:1999-11-08

    申请人: Spencer Greene

    发明人: Spencer Greene

    IPC分类号: H04L1256

    摘要: A system for providing multiple field matching capabilities for network data packets is disclosed. According to one embodiment (700) the system includes a number of prefix engines (704-0, 704-1, 712-0 and 712-1) coupled together in a pipelined fashion. First level prefix engines (704-0 and 704-1) perform longest prefix matching operations on address values (Dest-IP and Src-IP) and provide address equivalence class values (daclass and saclass). The address class equivalence values (daclass and saclass) are combined with port identification values (Dest-Port and Src-Port) and applied to second level prefix engines (712-0 and 712-1) which provide tuple equivalence class values (dtclass and stclass). The tuple equivalence class values (dtclass and stclass) are combined and applied to an output mapping circuit (718) which provides a flow specification value corresponding to each applied set of address (Dest-IP and Src-IP) and port (Dest-Port and Src-Port) values.

    摘要翻译: 公开了一种用于为网络数据分组提供多个场匹配能力的系统。 根据一个实施例(700),系统包括以流水线方式耦合在一起的多个前缀引擎(704-0,704-1,712-0和712-1)。 第一级前缀引擎(704-0和704-1)对地址值(Dest-IP和Src-IP)执行最长的前缀匹配操作,并提供地址等价类值(daclass和saclass)。 地址类等价值(daclass和saclass)与端口标识值(Dest-Port和Src-Port)组合,并应用于提供元组等价类值的二级前缀引擎(712-0和712-1)(dtclass和 stclass)。 元组等价类值(dtclass和stclass)被组合并应用于输出映射电路(718),输出映射电路(718)提供与每个应用的地址集(Dest-IP和Src-IP)和端口(Dest-Port)对应的流量规格值 和Src-Port)值。

    Systems and methods for order preserving data
    10.
    发明授权
    Systems and methods for order preserving data 有权
    用于订单保存数据的系统和方法

    公开(公告)号:US07953094B1

    公开(公告)日:2011-05-31

    申请号:US10358274

    申请日:2003-02-05

    申请人: Spencer Greene

    发明人: Spencer Greene

    IPC分类号: H04L12/56

    摘要: A data processing system includes an input circuit, a plurality of processing paths and an output circuit. The input circuit receives blocks of data on a plurality of data streams and distributes the blocks of data to the plurality of processing paths. The plurality of processing paths receive and process the distributed blocks of data. The output circuit selectively queues and dequeues the processed blocks of data based on a determined maximum differential delay among each of the processing paths and transmits the processed blocks of data.

    摘要翻译: 数据处理系统包括输入电路,多个处理路径和输出电路。 输入电路接收多个数据流上的数据块,并将数据块分配给多个处理路径。 多个处理路径接收和处理分布式数据块。 输出电路基于在每个处理路径之间确定的最大差分延迟来选择性地排列和出出处理的数据块,并发送处理的数据块。