ZERO-TRUST DYNAMIC DISCOVERY
    1.
    发明申请

    公开(公告)号:US20230026570A1

    公开(公告)日:2023-01-26

    申请号:US17937169

    申请日:2022-09-30

    Abstract: Zero-trust dynamic discovery in provided by identifying a plurality of endpoints, including targets and initiators, connected to a software defined network, wherein the targets are provided on the software defined network according to a network addressable memory standard that lacks a native discovery service; grouping the targets into a plurality of target groups and the initiators into a plurality of initiator groups; and in response to receiving a discovery request from a given initiator grouped in a given initiator group of the plurality of initiator groups, returning addressing information for a target group of the plurality of target groups associated with the given initiator group in a security policy configuration for the software defined network.

    ZERO-TRUST DYNAMIC DISCOVERY
    7.
    发明公开

    公开(公告)号:US20240155005A1

    公开(公告)日:2024-05-09

    申请号:US18412033

    申请日:2024-01-12

    CPC classification number: H04L63/20 G06F8/65 G06F16/285 H04L67/55

    Abstract: Zero-trust dynamic discovery in provided by identifying a plurality of endpoints, including targets and initiators, connected to a software defined network, wherein the targets are provided on the software defined network according to a network addressable memory standard that lacks a native discovery service; grouping the targets into a plurality of target groups and the initiators into a plurality of initiator groups; and in response to receiving a discovery request from a given initiator grouped in a given initiator group of the plurality of initiator groups, returning addressing information for a target group of the plurality of target groups associated with the given initiator group in a security policy configuration for the software defined network.

    MULTISITE INTERCONNECT AND POLICY WITH SWITCHING FABRICS

    公开(公告)号:US20220006758A1

    公开(公告)日:2022-01-06

    申请号:US17447773

    申请日:2021-09-15

    Abstract: Embodiments herein describe using translation mappings and security contracts to establish interconnects and policies between switching fabrics at different sites to create a unified fabric. In one embodiment, a multi-site controller can stretch endpoint groups (EPGs) between the sites so that a host or application in a first site can communicate with a host or application in a second site which is assigned to the same stretched EPG, despite the two sites have different namespaces. Further, the shadow EPGs can be formed to facilitate security contracts between EPGs in different sites. Each site can store namespace translation mapping that enable the site to convert namespace information in packets received from a different site into its own namespace values. As a result, independent bridging and routing segments in the various sites can be interconnected as well as providing application accessibility across different fabrics with independent and private namespaces.

    MITIGATING PRIORITY FLOW CONTROL DEADLOCK IN STRETCH TOPOLOGIES

    公开(公告)号:US20200136985A1

    公开(公告)日:2020-04-30

    申请号:US16172659

    申请日:2018-10-26

    Abstract: Embodiments provide for mitigating priority flow control deadlock in stretch topologies by initializing a plurality of queues in a buffer of a leaf switch at a local cluster of a site having a plurality of clusters, wherein each queue of the plurality of queues corresponds to a respective one cluster of the plurality of clusters; receiving a pause command for no-drop traffic on the leaf switch, the pause command including an internal Class-of-Service (iCoS) identifier associated with a particular cluster of the plurality of cluster and a corresponding queue in the plurality of queues; and in response to determining, based on the iCoS identifier, that the pause command was received from a remote spine switch associated with a different cluster than the local cluster: forwarding the pause command to a local spine switch in the local cluster; and implementing the pause command on the corresponding queue in the buffer.

Patent Agency Ranking