公开(公告)号：US08769067B2

公开(公告)日：2014-07-01

申请号：US12489249

申请日：2009-06-22

申请人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

发明人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

IPC分类号： G06F15/173

CPC分类号： H04L43/04 ,  H04L49/90

摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.

摘要翻译： 公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。 在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。 合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。 整合器可以向每个分组引擎发送消息以更新该组计数器值。 合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。 每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

公开(公告)号：US08745266B2

公开(公告)日：2014-06-03

申请号：US13173216

申请日：2011-06-30

申请人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

发明人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L45/306 ,  H04L29/08 ,  H04L45/74 ,  H04L61/103 ,  H04L61/1511 ,  H04L63/02 ,  H04L63/0815 ,  H04L67/2814

摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.

摘要翻译： 本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端 请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。 服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型 以及本文描述的服务或设备的形式。 中间设备可以选择机器来处理请求，并使用第2层重定向到机器。 中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。 一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。 响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。 并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

公开(公告)号：US08706877B2

公开(公告)日：2014-04-22

申请号：US11323352

申请日：2005-12-30

申请人： Prabakar Sundarrajan ,  Junxiao He ,  Sergey Verzunov ,  Charu Venkatraman ,  Anil Shetty ,  Josephine Suganthi

发明人： Prabakar Sundarrajan ,  Junxiao He ,  Sergey Verzunov ,  Charu Venkatraman ,  Anil Shetty ,  Josephine Suganthi

IPC分类号： G06F15/16

CPC分类号： H04L67/2861 ,  H04L63/0428 ,  H04L67/2814 ,  H04L67/2819 ,  H04L67/2842 ,  H04L67/34

摘要： The present invention is directed towards systems and methods for dynamically redirecting on a client communications of the client with a server to bypass an intermediary that is determined to be unavailable for such communications. An acceleration program on the client establishes a transport layer connection between the client and server, and intercepts communications of the client to the server. The transport layer connection may be established via an intermediary, such as a gateway, proxy or appliance. If the client-side acceleration program determines the intermediary is not available for communicating by the client to the server, the acceleration program automatically establishes a second transport layer connection to the server in order to bypass the intermediary. The acceleration program then transmits the intercepted communications of the client via the second transport layer connection to the server. The acceleration program may automatically redirect intercepted communications of the client to the server transparently to any user or application of the client.

摘要翻译： 本发明涉及用于在客户端与服务器的客户端通信上动态地重定向以绕过被确定为对于这种通信不可用的中介的系统和方法。 客户机上的一个加速程序建立客户端和服务器之间的传输层连接，并拦截客户端与服务器的通信。 可以经由诸如网关，代理或设备的中介来建立传输层连接。 如果客户端加速程序确定中介不可用于客户端与服务器的通信，则加速程序自动建立到服务器的第二传输层连接，以绕过中介。 加速程序然后经由第二传输层连接将客户端的截取的通信发送到服务器。 加速程序可以将客户端的拦截通信自动重定向到客户机的任何用户或应用程序。

公开(公告)号：US08626946B2

公开(公告)日：2014-01-07

申请号：US11462345

申请日：2006-08-03

申请人： Sandeep Kamath ,  Josephine Suganthi ,  Anil Shetty

发明人： Sandeep Kamath ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L67/1008 ,  H04L67/1002 ,  H04L67/1012 ,  H04L67/1029 ,  H04L67/16 ,  H04L67/28 ,  H04L67/288 ,  H04L67/2885 ,  H04L67/289 ,  H04L69/163

摘要： Systems and methods are disclosed for providing a hierarchy of appliances to access resources across branch offices. A method comprises: establishing, by a first aggregator appliance, connections with a first plurality of branch office appliances; establishing, by a second aggregator appliance, connections with a second plurality of branch office appliances, the first plurality not having information identifying the second plurality; receiving, by the first aggregator appliance, from a first branch office appliance a request from a client for access to a resource; identifying, by the first aggregator appliance via the second aggregator appliance, a second branch office appliance from the second plurality to service the request; transmitting, by the first aggregator appliance, to the first branch office appliance information identifying the second branch office appliance; and establishing, by the first branch office appliance, a connection with the second branch office appliance. Corresponding systems are also described.

摘要翻译： 公开了用于提供用于访问分支机构的资源的设备层级的系统和方法。 一种方法包括：由第一聚合器设备建立与第一多个分支办公设备的连接; 通过第二聚合器设备建立与第二多个分支办公设备的连接，所述第一多个没有标识所述第二多个的信息; 由第一聚合设备从第一分支办公室设备接收客户端访问资源的请求; 由所述第一聚合器装置经由所述第二聚合器装置识别来自所述第二聚合器装置的第二分支办公用具以服务所述请求; 由所述第一聚合器装置向所述第一分支机构设备识别所述第二分支机构的信息; 并由第一分支机构建立与第二分支机构的连接。 还描述了相应的系统。

公开(公告)号：US08289975B2

公开(公告)日：2012-10-16

申请号：US12489286

申请日：2009-06-22

申请人： Josephine Suganthi ,  Anil Shetty

发明人： Josephine Suganthi ,  Anil Shetty

IPC分类号： H04L12/28

CPC分类号： H04L29/12339 ,  H04L61/2503 ,  H04L67/06 ,  H04L69/12 ,  H04L69/14 ,  H04L69/32

摘要： The present application is directed towards systems and methods for handling a multi-connection protocol communication between a client and a server traversing a multi-core system. The multi-connection protocol comprises a first connection and a second connection, which may be used respectively for control communications and data communications. Because different cores in the multi-core system may handle the first connection and second connection, the present invention provides systems and methods for efficiently coordinating protocol management between a plurality of cores.

摘要翻译： 本申请涉及用于处理客户机和遍历多核系统的服务器之间的多连接协议通信的系统和方法。 多连接协议包括可以分别用于控制通信和数据通信的第一连接和第二连接。 由于多核系统中的不同核心可以处理第一连接和第二连接，本发明提供了用于有效地协调多个核之间的协议管理的系统和方法。

公开(公告)号：US07953889B2

公开(公告)日：2011-05-31

申请号：US11462200

申请日：2006-08-03

申请人： Josephine Suganthi ,  Junxiao He ,  Sergey Verzunov ,  Anil Shetty ,  Charu Venkatraman

发明人： Josephine Suganthi ,  Junxiao He ,  Sergey Verzunov ,  Anil Shetty ,  Charu Venkatraman

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L63/0272

摘要： Methods for using a client agent to route client requests among a plurality of appliances using transport layer information include the steps of: establishing, by a client agent executing on a client, a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers; establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of: the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.

摘要翻译： 使用客户端代理使用传输层信息在多个设备之间路由客户端请求的方法包括以下步骤：由在客户端上执行的客户端代理建立与多个设备的第一设备的第一传输层连接， 第一个设备提供对一个或多个服务器的访问; 由在客户端上执行的客户端代理建立与多个设备的第二设备的第二传输层连接，所述第二设备提供对一个或多个服务器的访问; 由客户端代理拦截客户端发送的数据包; 基于以下至少一个的特征，由所述客户端代理选择所述连接之一来发送所截取的分组：传输层连接，所述多个设备或所述服务器; 并通过所选择的连接发送截取的分组。

公开(公告)号：US20100325263A1

公开(公告)日：2010-12-23

申请号：US12489249

申请日：2009-06-22

申请人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

发明人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

IPC分类号： G06F15/173 ,  G06F1/12

CPC分类号： H04L43/04 ,  H04L49/90

摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.

摘要翻译： 公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。 在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。 合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。 整合器可以向每个分组引擎发送消息以更新该组计数器值。 合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。 每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

公开(公告)号：US20100322252A1

公开(公告)日：2010-12-23

申请号：US12489286

申请日：2009-06-22

申请人： Josephine Suganthi ,  Anil Shetty

发明人： Josephine Suganthi ,  Anil Shetty

IPC分类号： H04L12/28 ,  G06F15/16

CPC分类号： H04L29/12339 ,  H04L61/2503 ,  H04L67/06 ,  H04L69/12 ,  H04L69/14 ,  H04L69/32

摘要： The present application is directed towards systems and methods for handling a multi-connection protocol communication between a client and a server traversing a multi-core system. The multi-connection protocol comprises a first connection and a second connection, which may be used respectively for control communications and data communications. Because different cores in the multi-core system may handle the first connection and second connection, the present invention provides systems and methods for efficiently coordinating protocol management between a plurality of cores.

摘要翻译： 本申请涉及用于处理客户机和遍历多核系统的服务器之间的多连接协议通信的系统和方法。 多连接协议包括可以分别用于控制通信和数据通信的第一连接和第二连接。 由于多核系统中的不同核心可以处理第一连接和第二连接，本发明提供了用于有效地协调多个核之间的协议管理的系统和方法。

公开(公告)号：US20080034110A1

公开(公告)日：2008-02-07

申请号：US11462200

申请日：2006-08-03

申请人： Josephine Suganthi ,  Junxiao He ,  Sergey Verzunov ,  Anil Shetty ,  Charu Venkatraman

发明人： Josephine Suganthi ,  Junxiao He ,  Sergey Verzunov ,  Anil Shetty ,  Charu Venkatraman

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04L63/0272

摘要： Methods for using a client agent to route client requests among a plurality of appliances using transport layer information include the steps of: establishing, by a client agent executing on a client, a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers; establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of: the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.

摘要翻译： 使用客户端代理使用传输层信息在多个设备之间路由客户端请求的方法包括以下步骤：由在客户端上执行的客户端代理建立与多个设备的第一设备的第一传输层连接， 第一个设备提供对一个或多个服务器的访问; 由在客户端上执行的客户端代理建立与多个设备的第二设备的第二传输层连接，所述第二设备提供对一个或多个服务器的访问; 由客户端代理拦截客户端发送的数据包; 基于以下至少一个的特征，由所述客户端代理选择所述连接之一来发送所截取的分组：传输层连接，所述多个设备或所述服务器; 并通过所选择的连接发送截取的分组。

公开(公告)号：US08694684B2

公开(公告)日：2014-04-08

申请号：US11465943

申请日：2006-08-21

申请人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

发明人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F15/16

CPC分类号： H04L69/04 ,  H04L63/0272 ,  H04L63/166 ,  H04L67/28 ,  H04W28/06 ,  H04W80/06

摘要： A method for compressing a stream of application layer network traffic communicated over a transport layer connection of a virtual private network connection between a client and a server using an appliance. The appliance intercepts one or more transport layer packets of a stream of application network traffic communicated via a transport layer connection of a virtual private network connection between a client and a server. The appliance accumulates data from a payload of the intercepted transport layer packets, determines data accumulated for transmission should be compressed based on one or more compression trigger, and compresses the accumulated data into a self-contained compression block for transmission.

摘要翻译： 一种用于压缩通过使用设备的客户端和服务器之间的虚拟专用网络连接的传输层连接上传送的应用层网络流量流的方法。 设备拦截通过客户端和服务器之间的虚拟专用网络连接的传输层连接传送的应用网络业务流的一个或多个传输层分组。 设备从被拦截的传输层分组的有效载荷中积累数据，确定用于传输的数据被压缩，并根据一个或多个压缩触发进行压缩，并将累积的数据压缩为独立的压缩块进行传输。