Generic offload architecture
    6.
    发明授权
    Generic offload architecture 有权
    通用卸载架构

    公开(公告)号:US09043450B2

    公开(公告)日:2015-05-26

    申请号:US12580094

    申请日:2009-10-15

    IPC分类号: G06F15/177 G06F9/50 H04L29/08

    摘要: An system comprising an ingress device configured to receive and process data, wherein the ingress device comprises a plurality of processing stages configured to process the data, wherein a configurable subset of the stages comprises a selectable tap point, and wherein the ingress device is further configured to, upon reaching a selected tap point, suspend processing and send at least a portion of the data to another device; an offload engine device configured to receive data from the ingress device, after the selected tap point has been reached, and to provide additional processing of the data, which the ingress device is not configured to provide; an egress device configured to transmit the data that has been additionally processed by the offload engine device.

    摘要翻译: 一种包括被配置为接收和处理数据的入口设备的系统,其中所述入口设备包括被配置为处理所述数据的多个处理级,其中所述级的可配置子集包括可选择的抽头点,并且其中所述入口设备被进一步配置 在到达所选择的分接点之后,暂停处理并将至少一部分数据发送到另一设备; 卸载引擎装置,其被配置为在到达所选择的分接点之后从所述入口设备接收数据,并且为所述数据提供附加处理,所述数据是入口设备未被配置为提供的; 被配置为发送由卸载引擎设备另外处理的数据的出口设备。

    Dynamic load balancing using virtual link credit accounting
    7.
    发明授权
    Dynamic load balancing using virtual link credit accounting 有权
    使用虚拟链接信用账户进行动态负载均衡

    公开(公告)号:US08824284B2

    公开(公告)日:2014-09-02

    申请号:US12780524

    申请日:2010-05-14

    IPC分类号: H04J1/16 H04L12/56

    摘要: Methods and apparatus for dynamic load balancing using virtual link credit accounting are disclosed. An example method includes receiving, at a network device, a data packet to be communicated using an aggregation group, the aggregation group including a plurality of virtual links having a common destination. The example method further includes determining a hash value based on the packet and determining an assigned virtual link of the plurality of virtual links based on the hash value. The example method also includes reducing a number of available transmission credits for the aggregation group and reducing a number of available transmission credits for the assigned virtual link. The example method still further includes communicating the packet to another network device using the assigned virtual link.

    摘要翻译: 披露了使用虚拟链接信用账户进行动态负载均衡的方法和装置。 一种示例方法包括在网络设备处接收要使用聚合组进行传送的数据分组,所述聚合组包括具有公共目的地的多个虚拟链路。 该示例方法还包括基于分组确定散列值,并且基于该散列值确定多个虚拟链路中的分配的虚拟链路。 该示例方法还包括减少用于聚合组的可用传输信用数量,并减少所分配的虚拟链路的可用传输信用数量。 该示例方法还包括使用分配的虚拟链路将分组传送到另一网络设备。

    Systems and methods for enabling assured records using fine grained auditing of virtual private network traffic
    9.
    发明授权
    Systems and methods for enabling assured records using fine grained auditing of virtual private network traffic 有权
    允许使用对虚拟专用网络流量进行细粒度审计的保证记录的系统和方法

    公开(公告)号:US08484718B2

    公开(公告)日:2013-07-09

    申请号:US11462230

    申请日:2006-08-03

    IPC分类号: G06F9/00

    摘要: Methods for enabling assured records using fine grained auditing of virtual private network traffic include establishing, by an appliance, a transport layer virtual private network connection with a client operated by a user; receiving, by the appliance via the connection, a request from the client identifying a resource; determining, by the appliance, the request meets at least one security condition; transmitting, by the appliance to an audit log, a record of the request; receiving, by the appliance from the audit log, a confirmation that the record was logged; and granting, responsive to the received confirmation, access to the identified resource. Security conditions may identify at least one user, at least one application, a network or group of networks, and one or more resources. Corresponding systems are also described.

    摘要翻译: 使用对虚拟专用网络流量进行细粒度审计的保证记录的方法包括由设备建立与用户操作的客户端的传输层虚拟专用网络连接; 通过连接从设备接收识别资源的客户端的请求; 由所述设备确定所述请求满足至少一个安全条件; 由设备向审核日志传送请求的记录; 设备从审核日志接收记录记录的确认; 以及响应于所接收的确认,授予对所识别的资源的访问。 安全条件可以标识至少一个用户,至少一个应用,网络或网络组,以及一个或多个资源。 还描述了相应的系统。

    Systems and methods for cookie proxy jar management across cores in a multi-core system
    10.
    发明授权
    Systems and methods for cookie proxy jar management across cores in a multi-core system 有权
    在多核系统中跨多核的cookie代理jar管理的系统和方法

    公开(公告)号:US08484287B2

    公开(公告)日:2013-07-09

    申请号:US12851449

    申请日:2010-08-05

    IPC分类号: G06F15/16

    摘要: The present solution is directed towards systems and methods for managing cookies by a multi-core device. The device is intermediary to a client and one or more servers. A first core of a multi-core device receives a response from a server to a request of the client through a user session. The response comprises a cookie. The first core removes the cookie from the response and stores the cookie in a corresponding storage for the session. The first core forwards the response without the cookie to the client. A second core then receives via a session, a second request from the client. The second core determines the identification of the first core as owner of the session from the second request. The second core then communicates to the first core a third request for cookie information for the session.

    摘要翻译: 目前的解决方案涉及用于通过多核设备管理Cookie的系统和方法。 该设备是客户端和一个或多个服务器的中介。 多核设备的第一核心通过用户会话接收从服务器到客户端的请求的响应。 响应包括一个cookie。 第一个核心从响应中删除cookie,并将cookie存储在会话的相应存储中。 第一个核心将没有cookie的响应转发给客户端。 然后,第二核心经由会话接收来自客户端的第二请求。 第二核确定第一个核心作为第二个请求中的会话的所有者的标识。 然后,第二个核心向第一个核心传达第三个会话Cookie信息请求。