Methods and devices for blocking, detecting, and/or preventing malicious traffic

    公开(公告)号:US11895116B2

    公开(公告)日:2024-02-06

    申请号:US17248182

    申请日:2021-01-13

    摘要: A network device obtains information, associated with blacklisted domains, that includes blacklisted domain identifiers, and sinkhole server identifiers associated with the blacklisted domain identifiers. The network device obtains a set of rules that specify match criteria, associated with the blacklisted domains, that include source network addresses and/or destination network addresses for comparison to packet source network addresses and/or packet destination network addresses associated with incoming packets. The set of rules specify actions to perform based on a result of comparing the match criteria and the packet source network addresses and/or the packet destination network addresses for the incoming packets. The network device receives packets, examines a packet source network address and/or a packet destination network address associated with the packets, compares the packet source network address and/or the packet destination network address to the match criteria, and performs an action based on a result of the comparison.

    Dynamic server device monitoring
    4.
    发明授权

    公开(公告)号:US10567262B1

    公开(公告)日:2020-02-18

    申请号:US15921181

    申请日:2018-03-14

    发明人: Rishi K. Mutnuru

    IPC分类号: H04L29/06 H04L12/26

    摘要: A device may receive configuration information that identifies a set of server devices. The device may send, to the set of server devices, a request communication associated with determining a status of the set of server devices after receiving the configuration information. The device may process a response communication from the set of server devices after sending the request communication to the set of server devices. The request communication and the response communication may be associated with each other. The device may dynamically monitor the status of the set of server devices after processing the response communication. A first subset of the set of server devices may be monitored based on traffic from the first subset of the set of server devices. A second subset of the set of server devices may be monitored based on an additional response communication from the second subset of the set of server devices.

    Weighted rendezvous hashing
    5.
    发明授权
    Weighted rendezvous hashing 有权
    加权会合散列

    公开(公告)号:US09571570B1

    公开(公告)日:2017-02-14

    申请号:US14494999

    申请日:2014-09-24

    发明人: Rishi K. Mutnuru

    摘要: A device may be configured to store virtual identifier information indicating virtual identifiers associated with servers. The virtual identifier information may associate a quantity of virtual identifiers with each respective server of the servers based on a weight associated with the respective server. The device may receive an object identifier identifying an object to be processed by at least one of the servers. The device may calculate hash values for the virtual identifiers based on the object identifier. The device may determine a virtual identifier associated with a hash value that satisfies a particular condition. The device may select a server associated with the virtual identifier. The device may send an instruction to the server to process the object.

    摘要翻译: 设备可以被配置为存储指示与服务器相关联的虚拟标识符的虚拟标识符信息。 虚拟标识符信息可以基于与相应服务器相关联的权重将虚拟标识符的数量与服务器的每个相应服务器相关联。 设备可以接收标识要由至少一个服务器处理的对象的对象标识符。 设备可以基于对象标识符计算虚拟标识符的散列值。 设备可以确定与满足特定条件的散列值相关联的虚拟标识符。 设备可以选择与虚拟标识符相关联的服务器。 设备可以向服务器发送指令来处理对象。

    Automatic discovery, scaling, and load balancing of multiple cloud data centers in a software-defined network environment

    公开(公告)号:US10567288B1

    公开(公告)日:2020-02-18

    申请号:US15823906

    申请日:2017-11-28

    发明人: Rishi K. Mutnuru

    摘要: In general, techniques are disclosed for automatic discovery and load balancing of virtual service instances of a plurality of cloud data centers within a Software Defined Networking (SDN) or a Network Functions Virtualization (NFV) environment. In one example, a global load balancing device (GLB) of a first cloud data center receives, from an SDN controller, address information for a first set of virtual service instances provided by the first cloud data center and a hostname of a domain for which to perform load balancing across the plurality of cloud data centers. The GLB device requests, from a domain name server (DNS) for the domain, address information for other sets of virtual service instances provided by other cloud data centers. Further, the GLB device applies a load balancing algorithm to direct network traffic to one or more of the virtual service instances provided by the plurality of cloud data centers.

    Weighted rendezvous hashing
    8.
    发明授权

    公开(公告)号:US10079879B2

    公开(公告)日:2018-09-18

    申请号:US15425310

    申请日:2017-02-06

    发明人: Rishi K. Mutnuru

    IPC分类号: H04L29/08 G06F11/34

    摘要: A device may be configured to store virtual identifier information indicating virtual identifiers associated with servers. The virtual identifier information may associate a quantity of virtual identifiers with each respective server of the servers based on a weight associated with the respective server. The device may receive an object identifier identifying an object to be processed by at least one of the servers. The device may calculate hash values for the virtual identifiers based on the object identifier. The device may determine a virtual identifier associated with a hash value that satisfies a particular condition. The device may select a server associated with the virtual identifier. The device may send an instruction to the server to process the object.

    Methods and devices for blocking, detecting, and/or preventing malicious traffic

    公开(公告)号:US10911460B2

    公开(公告)日:2021-02-02

    申请号:US16025541

    申请日:2018-07-02

    摘要: A network device obtains information, associated with blacklisted domains, that includes blacklisted domain identifiers, and sinkhole server identifiers associated with the blacklisted domain identifiers. The network device obtains a set of rules that specify match criteria, associated with the blacklisted domains, that include source network addresses and/or destination network addresses for comparison to packet source network addresses and/or packet destination network addresses associated with incoming packets. The set of rules specify actions to perform based on a result of comparing the match criteria and the packet source network addresses and/or the packet destination network addresses for the incoming packets. The network device receives packets, examines a packet source network address and/or a packet destination network address associated with the packets, compares the packet source network address and/or the packet destination network address to the match criteria, and performs an action based on a result of the comparison.

    Spanning tree approach for global load balancing

    公开(公告)号:US10033805B1

    公开(公告)日:2018-07-24

    申请号:US15067592

    申请日:2016-03-11

    发明人: Rishi K. Mutnuru

    IPC分类号: H04L29/08 H04L29/12

    摘要: A device may receive first data center information associated with first data centers in a first region. The device may receive second data center information associated with second data centers in a second region that is different from the first region. The device may generate a spanning tree based on the first data center information and the second data center information. The spanning tree may be associated with exchanging metrics associated with the first data centers and the second data centers, and may be used to exchange the metrics between the device and other devices included in the first data centers or the second data centers. The device may exchange the metrics with the other devices based on the spanning tree.