公开(公告)号：US20220124075A1

公开(公告)日：2022-04-21

申请号：US17507312

申请日：2021-10-21

Applicant: Cisco Technology, Inc.

Inventor： Andree Toonk ,  Grzegorz Boguslaw Duraj ,  Alvin Sai Weng Wong ,  Kyle Mestery

IPC: H04L45/16 ,  H04L45/24

Abstract: An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.

公开(公告)号：US11888831B2

公开(公告)日：2024-01-30

申请号：US17507312

申请日：2021-10-21

Applicant: Cisco Technology, Inc.

Inventor： Andree Toonk ,  Grzegorz Boguslaw Duraj ,  Alvin Sai Weng Wong ,  Kyle Mestery

IPC: H04L9/40 ,  H04L9/12 ,  H04L45/16 ,  H04L45/24

CPC classification number: H04L63/0485 ,  H04L45/16 ,  H04L45/24 ,  H04L63/061 ,  H04L63/20

Abstract: An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.

公开(公告)号：US20240114015A1

公开(公告)日：2024-04-04

申请号：US18537260

申请日：2023-12-12

Applicant: Cisco Technology, Inc.

Inventor： Andree Toonk ,  Grzegorz Boguslaw Duraj ,  Alvin Sai Weng Wong ,  Kyle Mestery

IPC: H04L9/40 ,  H04L45/16 ,  H04L45/24

CPC classification number: H04L63/0485 ,  H04L45/16 ,  H04L45/24 ,  H04L63/061 ,  H04L63/20

Abstract: An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.

公开(公告)号：US11196726B2

公开(公告)日：2021-12-07

申请号：US16401304

申请日：2019-05-02

Applicant: Cisco Technology, Inc.

Inventor： Andree Toonk ,  Grzegorz Boguslaw Duraj ,  Alvin Sai Weng Wong ,  Kyle Mestery

IPC: H04L29/06 ,  H04L9/18 ,  H04L12/761 ,  H04L12/707 ,  H04L9/12

Abstract: An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.

公开(公告)号：US12003424B2

公开(公告)日：2024-06-04

申请号：US18111075

申请日：2023-02-17

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Andree Toonk ,  Rahim Lalani ,  Ian James Wells

IPC: H04L47/726 ,  H04L9/40 ,  H04L45/12 ,  H04L45/125 ,  H04L45/42 ,  H04L45/7453 ,  H04L47/78 ,  H04L47/80 ,  H04L67/10 ,  H04L67/1027 ,  H04L67/1097 ,  H04L67/146

CPC classification number: H04L47/726 ,  H04L45/42 ,  H04L47/781 ,  H04L47/801 ,  H04L63/166 ,  H04L67/1097

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.

公开(公告)号：US20230275845A1

公开(公告)日：2023-08-31

申请号：US18111075

申请日：2023-02-17

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Andree Toonk ,  Rahim Lalani ,  Ian James Wells

IPC: H04L47/726 ,  H04L45/42 ,  H04L47/78 ,  H04L47/80 ,  H04L9/40 ,  H04L67/1097

CPC classification number: H04L47/726 ,  H04L45/42 ,  H04L47/781 ,  H04L47/801 ,  H04L63/166 ,  H04L67/1097

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.

公开(公告)号：US11588749B2

公开(公告)日：2023-02-21

申请号：US16875524

申请日：2020-05-15

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Andree Toonk ,  Rahim Lalani ,  Ian James Wells

IPC: H04L47/726 ,  H04L45/42 ,  H04L47/78 ,  H04L47/80 ,  H04L9/40 ,  H04L67/1097 ,  H04L45/7453 ,  H04L45/12 ,  H04L47/125 ,  H04L67/10 ,  H04L67/1027 ,  H04L67/146

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.

公开(公告)号：US20210359954A1

公开(公告)日：2021-11-18

申请号：US16875524

申请日：2020-05-15

Applicant: Cisco Technology, Inc.

Inventor： Kyle Andrew Donald Mestery ,  Andree Toonk ,  Rahim Lalani ,  Ian James Wells

IPC: H04L12/911 ,  H04L12/927 ,  H04L12/717 ,  H04L29/06 ,  H04L29/08

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.

公开(公告)号：US20200280548A1

公开(公告)日：2020-09-03

申请号：US16401304

申请日：2019-05-02

Applicant: Cisco Technology, Inc.

Inventor： Andree Toonk ,  Grzegorz Boguslaw Duraj ,  Alvin Sai Weng Wong ,  Kyle Mestery

IPC: H04L29/06 ,  H04L12/707 ,  H04L12/761

Abstract: An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.