公开(公告)号：US06606316B1

公开(公告)日：2003-08-12

申请号：US09347428

申请日：1999-07-02

申请人： Mark Albert ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Tzu-Ming Tsang

IPC分类号： H04L1228

CPC分类号： H04L47/32 ,  H04L41/046 ,  H04L43/06 ,  H04L43/062 ,  H04L47/10 ,  H04L47/31

摘要： A system and method are described for gathering statistics about packets. The method includes determining at a service manager statistics that are to be gathered for a flow and sending instructions to a forwarding agent from the service manager detailing how to gather statistics for the flow. The forwarding agent is implemented on a network device and the forwarding agent is operative to receive statistics gathering instructions for a flow from the service manager. A report is received at the service manager of statistics gathered at the forwarding agent according to the instructions sent by the service manager.

摘要翻译： 描述了收集关于数据包的统计信息的系统和方法。 该方法包括在服务管理器处确定要为流收集的统计信息，以及从服务管理器向转发代理发送指令，详细说明如何收集流的统计信息。 转发代理在网络设备上实现，并且转发代理可操作以接收来自服务管理器的流的统计信息收集指令。 根据服务经理发出的指示，在转发代理收集的统计信息中收到报告。

公开(公告)号：US06985440B1

公开(公告)日：2006-01-10

申请号：US10674850

申请日：2003-09-29

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L12/28 ,  H04L12/56 ,  G06F13/16

CPC分类号： H04L63/08 ,  H04L29/12009 ,  H04L29/12367 ,  H04L29/12481 ,  H04L61/2514 ,  H04L61/2557 ,  H04L67/1002 ,  H04L2029/06054

摘要： A system and method are disclosed for specifying network address translation for a set of packets. A first set of instructions is sent to a forwarding agent specifying criteria for designated packets that are designated to undergo network address translation. A matching packet is received from the forwarding agent that matches the specified criteria. A network address translation scheme is determined for the matching packet. A second set of instructions are sent specifying the network address translation scheme for packets associated with the matching packet.

公开(公告)号：US06775692B1

公开(公告)日：2004-08-10

申请号：US09347036

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang ,  Bruce F. Wong

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang ,  Bruce F. Wong

IPC分类号： G06F1516

CPC分类号： H04L63/029 ,  H04L1/16 ,  H04L29/06 ,  H04L67/42 ,  H04L69/16 ,  H04L69/161 ,  H04L69/163 ,  H04L69/326 ,  H04L2001/0092

摘要： A system and method are disclosed for controlling access to a server. Instructions are sent to a forwarding agent that instruct the forwarding agent to forward packets to a service manager from clients attempting to establish a client connection to the server. A client connection is established with the client. A server connection is established from the service manager to the server and data is transferred from the server connection to the client connection.

摘要翻译： 公开了一种用于控制对服务器的访问的系统和方法。 指令被发送到转发代理，指示转发代理从尝试建立与服务器的客户端连接的客户端将数据包转发到服务管理器。 与客户端建立客户端连接。 服务器连接从服务管理器建立到服务器，数据从服务器连接传输到客户端连接。

公开(公告)号：US06735169B1

公开(公告)日：2004-05-11

申请号：US09347124

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L1226

CPC分类号： H04L61/25 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/1233 ,  H04L47/10 ,  H04L47/125 ,  H04L47/2425 ,  H04L47/2441 ,  H04L47/245 ,  H04L67/1002 ,  H04L67/16 ,  H04L67/28 ,  H04L67/2838 ,  H04L69/16 ,  H04L69/161 ,  H04L69/163 ,  H04L69/165 ,  H04L69/22 ,  H04L69/329 ,  H04L2029/06054

摘要： A system and method are disclosed for providing a plurality of network services. The method includes receiving at a forwarding agent a plurality of matching instructions corresponding to a specified flow from one or more service managers and storing the plurality of matching instructions on the forwarding agent having a forwarding agent network interface. A packet for the specified flow at the forwarding agent is received on the forwarding agent network interface. A highest service priority matching instruction stored on the forwarding agent is determined. The packet is processed according to the highest priority matching instruction. A next highest service priority matching instruction stored on the forwarding agent is determined and the packet is processed according to the next highest service priority matching instruction.

摘要翻译： 公开了一种用于提供多个网络服务的系统和方法。 该方法包括在转发代理处接收与一个或多个服务管理器的指定流对应的多个匹配指令，并将多个匹配指令存储在具有转发代理网络接口的转发代理上。 在转发代理网络接口上收到转发代理指定流的报文。 确定存储在转发代理上的最高服务优先级匹配指令。 根据最高优先级匹配指令对数据包进行处理。 确定存储在转发代理上的下一个最高服务优先级匹配指令，并根据下一个最高服务优先级匹配指令处理该分组。

公开(公告)号：US06650641B1

公开(公告)日：2003-11-18

申请号：US09347109

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Jacob Mark McGuire ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L1256

CPC分类号： H04L63/08 ,  H04L29/12009 ,  H04L29/12367 ,  H04L29/12481 ,  H04L61/2514 ,  H04L61/2557 ,  H04L67/1002 ,  H04L2029/06054

摘要： A system and method are disclosed for specifying network address translation for a set of packets. A first set of instructions is sent to a forwarding agent specifying criteria for designated packets that are designated to undergo network address translation. A matching packet is received from the forwarding agent that matches the specified criteria. A network address translation scheme is determined for the matching packet. A second set of instructions are sent specifying the network address translation scheme for packets associated with the matching packet.

摘要翻译： 公开了一种用于指定一组分组的网络地址转换的系统和方法。 第一组指令被发送到指定经过网络地址转换的指定分组的指定标准的转发代理。 从转发代理接收到匹配指定条件的匹配报文。 确定匹配包的网络地址转换方案。 发送第二组指令，指定与匹配分组相关联的分组的网络地址转换方案。

公开(公告)号：US06970913B1

公开(公告)日：2005-11-29

申请号：US09347111

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： G06F15/16 ,  H04L12/66 ,  H04L29/08

CPC分类号： H04L67/1008 ,  H04L67/1002

摘要： A system and method are described for selecting a server to handle a connection. The method includes receiving at a service manager a connection request intercepted by a network device having a forwarding agent that is operative to receive instructions from a service manager, the connection request having been forwarded from the forwarding agent on the network device to the service manager. A preferred server is selected at the service manager from among a group of available servers. The preferred server is the server that is to service the connection request. Instructions are sent from the service manager to the forwarding agent. The instructions include the preferred server that is to service the connection request so that the connection request may be forwarded from the network device to the preferred server.

公开(公告)号：US06633560B1

公开(公告)日：2003-10-14

申请号：US09347126

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L1228

CPC分类号： H04L29/06 ,  H04L41/0879 ,  H04L41/5096 ,  H04L63/0218 ,  H04L67/1002 ,  H04L67/2814 ,  H04L67/2819 ,  H04L69/16

摘要： A system and method are described for partitioning a network service among a plurality of service managers. The method includes configuring a first service manager to send a first request to a forwarding agent for packets meeting a first criteria and sending the first request to the forwarding agent. A second service manager is configured to send requests to the forwarding agent for packets meeting a second criteria and the second request is sent to the forwarding agent. Packets are checked at the forwarding agent to determine whether the packets meet the first criteria or the second criteria and packets that meet the first criteria are received at the first service manager; and packets that meet the second criteria are received at the second service manager.

摘要翻译： 描述了用于在多个服务管理器之间划分网络服务的系统和方法。 该方法包括：配置第一服务管理器，向满足第一标准的分组的转发代理发送第一请求，并向转发代理发送第一请求。 第二服务管理器被配置为向转发代理发送满足第二标准的分组的请求，并且将第二请求发送到转发代理。 在转发代理处检查分组以确定分组是否满足第一标准或第二标准，并且在第一服务管理器处接收到满足第一标准的分组; 并且在第二服务管理器处接收满足第二准则的分组。

公开(公告)号：US06549516B1

公开(公告)日：2003-04-15

申请号：US09347108

申请日：1999-07-02

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L1256

CPC分类号： H04L67/1002 ,  H04L67/1023 ,  H04L67/1038 ,  H04L69/329

摘要： A system and method are described for providing instructions for forwarding packets. The method includes broadcasting a general instruction specifying a plurality of flows to a plurality of forwarding agents and receiving at a service manager a first message responsive to the general instruction indicating that a packet for a specific flow has been received by a specific forwarding agent. A specific instruction is generated at the service manager for handling the specific flow and the specific instruction for handling the specific flow is sent to the specific forwarding agent.

摘要翻译： 描述了用于提供用于转发分组的指令的系统和方法。 该方法包括：向多个转发代理广播指定多个流的通用指令，并响应于指示特定流的分组已被特定的转发代理接收到的一般指令，在服务管理器处接收第一消息。 在服务管理器处产生特定的指令来处理特定的流程，特定流程的特定指令被发送到特定的转发代理。

公开(公告)号：US07570586B1

公开(公告)日：2009-08-04

申请号：US10737580

申请日：2003-12-16

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang ,  Bruce F. Wong

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordan ,  Edward A. Kersey ,  William M. LeBlanc ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang ,  Bruce F. Wong

IPC分类号： H04J1/16

CPC分类号： H04L29/06 ,  H04L47/10 ,  H04L47/125 ,  H04L67/1002 ,  H04L67/2814 ,  H04L69/329 ,  H04L69/40

摘要： A system and method are disclosed for providing a network service. A first criteria specifying a first set of flows from a first service manager is received at a forwarding agent. The first criteria specifies an expiration time interval. The first criteria is stored on the forwarding agent. A second criteria is received that specifies a second set of flows from a second service manager at the forwarding agent. The second set of flows includes flows that are in the first set of flows and the second criteria is designated as a lower priority criteria. The second criteria is stored on the forwarding agent. The first criteria is deleted from the forwarding agent upon the expiration of the expiration time interval. A packet is received that belongs to a flow that is included in the first set and the second set. It is determined that the packet matches the second set ant the packet is forwarded to the second service manager.

摘要翻译： 公开了一种用于提供网络服务的系统和方法。 在转发代理处接收从第一服务管理器指定第一组流的第一标准。 第一个条件指定一个到期时间间隔。 第一个条件存储在转发代理上。 接收到第二标准，其指定来自第二服务管理器在转发代理处的第二组流。 第二组流包括在第一组流中的流，并且第二标准被指定为较低优先级标准。 第二个条件存储在转发代理上。 在到期时间间隔到期时，第一个条件从转发代理中删除。 接收到属于第一组和第二组中包含的流的分组。 确定该分组与分组转发到第二服务管理器的第二组蚂蚁匹配。

公开(公告)号：US06909724B1

公开(公告)日：2005-06-21

申请号：US10623298

申请日：2003-07-18

申请人： Mark Albert ,  Richard A. Howes ,  James A. Jordon ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

发明人： Mark Albert ,  Richard A. Howes ,  James A. Jordon ,  Edward A. Kersey ,  Louis F. Menditto ,  Chris O'Rourke ,  Pranav Kumar Tiwari ,  Tzu-Ming Tsang

IPC分类号： H04L12/56 ,  H04J3/16

CPC分类号： H04L45/22 ,  H04L45/00 ,  H04L45/38 ,  H04L49/25 ,  H04L49/602

摘要： A method of obtaining instructions for routing a packet is described that includes receiving a packet having a packet flow identifier that includes a packet source IP address, a packet destination IP address, a packet source port, and a packet destination port and checking whether the packet flow identifier matches a stored instruction. If the packet flow identifier does not match a stored instruction, whether the packet flow identifier matches a stored criteria is checked and if the packet matches a stored criteria, the packet is forwarded to a service manager.

摘要翻译： 描述了一种获取用于路由分组的指令的方法，包括接收具有分组流标识符的分组，分组流标识符包括分组源IP地址，分组目的地IP地址，分组源端口和分组目的地端口，并检查分组 流标识符与存储的指令匹配。 如果分组流标识符与存储的指令不匹配，则检查分组流标识符是否匹配存储的标准，并且如果分组与存储的标准匹配，则分组被转发到服务管理器。