Rapid protocol failure detection
    1.
    发明授权
    Rapid protocol failure detection 有权
    快速协议故障检测

    公开(公告)号:US07623464B2

    公开(公告)日:2009-11-24

    申请号:US10888122

    申请日:2004-07-09

    IPC分类号: G01R31/08

    摘要: A method is disclosed for rapidly detecting a protocol failure. In one embodiment, the method includes receiving an indication that a first process has failed. The first process having been engaged in communications over one or more network connections with a second process. A packet is formed, such that the packet appears to have been formed by the first process. The packet includes one or more data values, which, when received and processed by the second process, will cause the second process to close the network connection. The packet is sent to the second process. When the second process receives the packet, the second process to closes the network connection.

    摘要翻译: 公开了一种用于快速检测协议故障的方法。 在一个实施例中,该方法包括接收第一进程失败的指示。 第一进程已经通过一个或多个网络连接进行了第二进程的通信。 形成分组,使得分组似乎是由第一进程形成的。 该分组包括一个或多个数据值,当由第二进程接收和处理时将使第二进程关闭网络连接。 数据包被发送到第二个进程。 当第二个进程收到数据包时,第二个进程关闭网络连接。

    Detecting unavailable network connections
    2.
    发明申请
    Detecting unavailable network connections 有权
    检测不可用的网络连接

    公开(公告)号:US20060159011A1

    公开(公告)日:2006-07-20

    申请号:US11036191

    申请日:2005-01-14

    IPC分类号: H04J3/14 H04L12/56

    摘要: A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.

    摘要翻译: 一种用于检测不可用网络连接的方法包括:在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处,其中所述第一节点通信地耦合到第二数据处理 节点用作冗余备份,周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用,而不使用超时; 并且响应于此,向所述对等节点发送通知,其中所述通知包括所述检查点序列值。 一个实施例提供了快速检测和响应TCP过程的故障,而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

    Detecting unavailable network connections
    3.
    发明授权
    Detecting unavailable network connections 有权
    检测不可用的网络连接

    公开(公告)号:US08174964B2

    公开(公告)日:2012-05-08

    申请号:US12976923

    申请日:2010-12-22

    IPC分类号: H04L1/22

    摘要: A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.

    摘要翻译: 一种用于检测不可用网络连接的方法包括:在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处,其中所述第一节点通信地耦合到第二数据处理 节点用作冗余备份,周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用,而不使用超时; 并且响应于此,向所述对等节点发送通知,其中所述通知包括所述检查点序列值。 一个实施例提供了快速检测和响应TCP过程的故障,而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

    Detecting unavailable network connections
    4.
    发明授权
    Detecting unavailable network connections 有权
    检测不可用的网络连接

    公开(公告)号:US07903546B2

    公开(公告)日:2011-03-08

    申请号:US11036191

    申请日:2005-01-14

    IPC分类号: H04L1/22

    摘要: A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.

    摘要翻译: 一种用于检测不可用网络连接的方法包括:在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处,其中所述第一节点通信地耦合到第二数据处理 节点用作冗余备份,周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用,而不使用超时; 并且响应于此,向所述对等节点发送通知,其中所述通知包括所述检查点序列值。 一个实施例提供了快速检测和响应TCP过程的故障,而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

    Detecting Unavailable Network Connections
    5.
    发明申请
    Detecting Unavailable Network Connections 有权
    检测不可用的网络连接

    公开(公告)号:US20110093591A1

    公开(公告)日:2011-04-21

    申请号:US12976923

    申请日:2010-12-22

    IPC分类号: G06F15/173

    摘要: A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.

    摘要翻译: 一种用于检测不可用网络连接的方法包括:在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处,其中所述第一节点通信地耦合到第二数据处理 节点用作冗余备份,周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用,而不使用超时; 并且响应于此,向所述对等节点发送通知,其中所述通知包括所述检查点序列值。 一个实施例提供了快速检测和响应TCP过程的故障,而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

    Detecting change in a transport protocol window size without data transmission
    7.
    发明授权
    Detecting change in a transport protocol window size without data transmission 有权
    检测传输协议窗口大小的变化,无需数据传输

    公开(公告)号:US07613118B2

    公开(公告)日:2009-11-03

    申请号:US11133622

    申请日:2005-05-19

    IPC分类号: G01R31/08 G06F12/00

    摘要: A method detects a change in TCP receive window size while preventing fragmentation of data. A TCP stack receives a segment that advertises a receive window size of zero. If data needs to be sent, and only if so, a timer is started. When the timer expires, a TCP segment that contains a first sequence number value equal to second sequence number representing sent but unacknowledged data minus one, and a segment length value of zero, is sent. Without sending a fragment of data, this triggers a peer TCP process to send an updated window size. A TCP ACK segment is received and contains an updated receive window size. If the updated receive window size is greater than a specified value, then the data is sent. Otherwise, a counter is incremented, and the steps are re-performed if the counter is less than a specified value.

    摘要翻译: 一种方法检测TCP接收窗口大小的变化,同时防止数据碎片化。 TCP堆栈接收一个通告接收窗​​口大小为零的段。 如果需要发送数据,并且只有这样,才能启动定时器。 当定时器到期时,发送包含表示发送但未确认的数据减去1的第二序列号的第一序列号值和段长度值为零的TCP段。 不发送数据片段,这将触发对等TCP进程发送更新的窗口大小。 TCP ACK段被接收并且包含更新的接收窗口大小。 如果更新的接收窗口大小大于指定值,则发送数据。 否则,计数器递增,如果计数器小于指定值,则重新执行步骤。

    Method and apparatus for preventing network reset attacks
    8.
    发明授权
    Method and apparatus for preventing network reset attacks 有权
    防止网络重置攻击的方法和装置

    公开(公告)号:US07565694B2

    公开(公告)日:2009-07-21

    申请号:US10959225

    申请日:2004-10-05

    摘要: A method for improving resistance of network protocols running on transmission control protocol (TCP), such as BGP. For example, a method comprises receiving, from a TCP application, a request to ignore all TCP segments with an RST bit set, except for solicited RST segments; establishing a filter that blocks all but solicited TCP RST segments; receiving a TCP segment with a SYN bit set and a sequence number value within an allowed window for a TCP connection matching the received segment, and for a session of the TCP application; re-configuring the filter to allow TCP RST segments for the connection associated with the received segment; requesting the TCP application to initiate an event that will induce a legitimate sender of the received segment to send a valid TCP RST segment in response; and closing the connection only when a TCP RST segment is received in response.

    摘要翻译: 一种提高在传输控制协议(TCP)(如BGP)上运行的网络协议的阻力的方法。 例如,一种方法包括从TCP应用程序接收除了被请求的RST段之外忽略具有RST位的所有TCP段的请求; 建立一个阻塞所有但被请求的TCP RST段的过滤器; 接收具有SYN位集合的TCP段和在允许的窗口内的序列号值,用于匹配所接收的段的TCP连接以及TCP应用的会话; 重新配置过滤器以允许TCP RST段用于与接收段相关联的连接; 请求TCP应用程序发起一个将导致接收段的合法发送方发送有效的TCP RST段作为响应的事件; 并且只有当接收到TCP RST段作为响应时才关闭连接。

    Cooperative TCP / BGP window management for stateful switchover
    9.
    发明授权
    Cooperative TCP / BGP window management for stateful switchover 有权
    协同TCP / BGP窗口管理进行状态切换

    公开(公告)号:US07515525B2

    公开(公告)日:2009-04-07

    申请号:US10948732

    申请日:2004-09-22

    IPC分类号: H04L12/26

    摘要: A system and method for performing stateful switchover with reduced data, such as only metadata about a TCP window state. The metadata comprises a size of TCP packets used to send BGP messages, and which of those have been acknowledged by a neighbor networking device. The networking device comprises a BGP module to establish a BGP session between the networking device and a neighbor networking device. An active transport module within the networking device synchronizes with a standby transport module within the networking device by sending the metadata. A fault detector within the networking device initiates a stateful switchover from the active transport module to the standby transport module responsive to detecting a failure of a process and/or processor. The standby transport module uses the metadata to determine stateful metadata for preserving current BGP and TCP sessions of the networking device with dummy TCP packets having the same size ad sent TCP packets and containing safe BGP message data.

    摘要翻译: 一种用简单数据进行状态切换的系统和方法,例如仅关于TCP窗口状态的元数据。 元数据包括用于发送BGP消息的TCP数据包的大小,以及哪些哪些已被邻居网络设备确认。 网络设备包括BGP模块,用于在组网设备和邻居网络设备之间建立BGP会话。 网络设备内的主动传输模块通过发送元数据与网络设备内的备用传输模块进行同步。 响应于检测到过程和/或处理器的故障,网络设备内的故障检测器启动从主动传输模块到备用传输模块的状态切换。 备用传输模块使用元数据来确定有状态元数据,用于保留具有相同大小的发送的TCP数据包并包含安全的BGP消息数据的伪TCP数据包的网络设备的当前BGP和TCP会话。

    Transport protocol connection synchronization
    10.
    发明申请
    Transport protocol connection synchronization 有权
    传输协议连接同步

    公开(公告)号:US20060262734A1

    公开(公告)日:2006-11-23

    申请号:US11134686

    申请日:2005-05-19

    IPC分类号: H04L12/28 H04L12/56

    摘要: A system and method supporting synchronization of replicated transport layer connections in a redundant processor telecommunications network element. One method involves receiving, at a network element comprising an active transport protocol process coupled to a standby transport protocol process, information identifying a newly created transport layer connection maintained at the active transport protocol process; assigning a unique connection identifier to the transport layer connection; sending the unique connection identifier, in association with other, protocol-specific connection identifying information, to the standby protocol process; and sending, to the standby transport protocol process, one or more messages comprising one or more properties or statistics associated with the transport layer connection, wherein the messages identify the transport layer connection using the unique connection identifier.

    摘要翻译: 支持冗余处理器电信网络元件中复制传输层连接同步的系统和方法。 一种方法包括在包括与备用传输协议过程相关联的活动传输协议进程的网络元件处接收标识在活动传输协议过程中维护的新创建的传输层连接的信息; 向传输层连接分配唯一的连接标识符; 将与所述协议特定连接识别信息相关联的唯一连接标识符发送到所述备用协议进程; 以及向所述备用传输协议进程发送包括与所述传输层连接相关联的一个或多个属性或统计信息的一个或多个消息,其中所述消息使用所述唯一连接标识符标识所述传输层连接。