公开(公告)号：US08949414B2

公开(公告)日：2015-02-03

申请号：US13337706

申请日：2011-12-27

申请人： Murali Raja ,  Sridhar Srinivasan ,  Saravana Annamalaisami ,  Devesh Prakash ,  Josephine Suganthi ,  Anil Shetty

发明人： Murali Raja ,  Sridhar Srinivasan ,  Saravana Annamalaisami ,  Devesh Prakash ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F15/173 ,  H04L12/26 ,  H04L29/06

CPC分类号： H04L43/028 ,  H04L29/06 ,  H04L43/00

摘要： The present invention is directed towards systems and methods for aggregating and providing statistics from cores of a multi-core system intermediary between one or more clients and servers. The system may maintain in shared memory a global device number for each core of the multi-core system. The system may provide a thread for each core of the multi-core system to gather data from the corresponding core. A first thread may generate aggregated statistics from a corresponding core by parsing the gathered data from the corresponding core. The first thread may transfer the generated statistics to a statistics log according to a schedule. The system may adaptively reschedule the transfer by monitoring the operation of each computing thread. Responsive to a request from a client, an agent of the client may obtain statistics from the statistics log.

摘要翻译： 本发明涉及用于从一个或多个客户端和服务器之间的多核系统中介的核聚合和提供统计信息的系统和方法。 该系统可以在共享存储器中维护多核系统的每个核心的全局设备号。 系统可以为多核系统的每个核心提供线程，以从相应的核心收集数据。 第一个线程可以通过从相应的核心解析收集的数据来从相应的核心生成聚合的统计信息。 第一个线程可以根据时间表将生成的统计信息传输到统计日志。 系统可以通过监视每个计算线程的操作来自适应地重新调度传输。 响应于客户端的请求，客户端的代理可以从统计日志中获取统计信息。

公开(公告)号：US20120226804A1

公开(公告)日：2012-09-06

申请号：US13337706

申请日：2011-12-27

申请人： Murali Raja ,  Sridhar Srinivasan ,  Saravana Annamalaisami ,  Devesh Prakash ,  Josephine Suganthi ,  Anil Shetty

发明人： Murali Raja ,  Sridhar Srinivasan ,  Saravana Annamalaisami ,  Devesh Prakash ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L43/028 ,  H04L29/06 ,  H04L43/00

摘要： The present invention is directed towards systems and methods for aggregating and providing statistics from cores of a multi-core system intermediary between one or more clients and servers. The system may maintain in shared memory a global device number for each core of the multi-core system. The system may provide a thread for each core of the multi-core system to gather data from the corresponding core. A first thread may generate aggregated statistics from a corresponding core by parsing the gathered data from the corresponding core. The first thread may transfer the generated statistics to a statistics log according to a schedule. The system may adaptively reschedule the transfer by monitoring the operation of each computing thread. Responsive to a request from a client, an agent of the client may obtain statistics from the statistics log.

摘要翻译： 本发明涉及用于从一个或多个客户端和服务器之间的多核系统中介的核聚合和提供统计信息的系统和方法。 该系统可以在共享存储器中维护多核系统的每个核心的全局设备号。 系统可以为多核系统的每个核心提供线程，以从相应的核心收集数据。 第一个线程可以通过从相应的核心解析收集的数据来从相应的核心生成聚合的统计信息。 第一个线程可以根据时间表将生成的统计信息传输到统计日志。 系统可以通过监视每个计算线程的操作来自适应地重新调度传输。 响应于客户端的请求，客户端的代理可以从统计日志中获取统计信息。

公开(公告)号：US08769067B2

公开(公告)日：2014-07-01

申请号：US12489249

申请日：2009-06-22

申请人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

发明人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

IPC分类号： G06F15/173

CPC分类号： H04L43/04 ,  H04L49/90

摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.

摘要翻译： 公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。 在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。 合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。 整合器可以向每个分组引擎发送消息以更新该组计数器值。 合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。 每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

公开(公告)号：US20100325263A1

公开(公告)日：2010-12-23

申请号：US12489249

申请日：2009-06-22

申请人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

发明人： Murali Raja ,  Anil Shetty ,  Josephine Suganthi ,  Saravana Annamalaisami

IPC分类号： G06F15/173 ,  G06F1/12

CPC分类号： H04L43/04 ,  H04L49/90

摘要： Systems and methods for consolidating metrics and statistics used for load balancing by a plurality of cores of a multi-core intermediary are disclosed. A timer operating on each packet engine of each core in a multi-core system may expire. A consolidator may store, responsive to expiration of the timer, a set of counter values from each of the packet engines to a first storage location. The consolidator may send to each packet engine a message to update the set of counter values. The consolidator may, upon completion of updating the set of counter values by the packet engines, send a second message to the packet engines that includes a consolidated set of counter values determined based on the updated set of values from each packet engine. Each packet engine may establish settings and parameters for load balancing based on the consolidated set of counter values.

摘要翻译： 公开了用于整合由多核中间体的多个核心进行负载平衡的度量和统计数据的系统和方法。 在多核系统中每个核心的每个分组引擎上运行的定时器可能会过期。 合并器可以响应于定时器的到期而存储从每个分组引擎到第一存储位置的一组计数器值。 整合器可以向每个分组引擎发送消息以更新该组计数器值。 合并器可以在完成通过分组引擎更新计数器值集合之后向分组引擎发送第二消息，该消息包括基于来自每个分组引擎的更新的值集合所确定的一组合并的计数器值。 每个分组引擎可以基于统一的计数器值集合建立用于负载平衡的设置和参数。

公开(公告)号：US08745266B2

公开(公告)日：2014-06-03

申请号：US13173216

申请日：2011-06-30

申请人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

发明人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L45/306 ,  H04L29/08 ,  H04L45/74 ,  H04L61/103 ,  H04L61/1511 ,  H04L63/02 ,  H04L63/0815 ,  H04L67/2814

摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.

摘要翻译： 本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端 请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。 服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型 以及本文描述的服务或设备的形式。 中间设备可以选择机器来处理请求，并使用第2层重定向到机器。 中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。 一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。 响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。 并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

公开(公告)号：US08694684B2

公开(公告)日：2014-04-08

申请号：US11465943

申请日：2006-08-21

申请人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

发明人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F15/16

CPC分类号： H04L69/04 ,  H04L63/0272 ,  H04L63/166 ,  H04L67/28 ,  H04W28/06 ,  H04W80/06

摘要： A method for compressing a stream of application layer network traffic communicated over a transport layer connection of a virtual private network connection between a client and a server using an appliance. The appliance intercepts one or more transport layer packets of a stream of application network traffic communicated via a transport layer connection of a virtual private network connection between a client and a server. The appliance accumulates data from a payload of the intercepted transport layer packets, determines data accumulated for transmission should be compressed based on one or more compression trigger, and compresses the accumulated data into a self-contained compression block for transmission.

摘要翻译： 一种用于压缩通过使用设备的客户端和服务器之间的虚拟专用网络连接的传输层连接上传送的应用层网络流量流的方法。 设备拦截通过客户端和服务器之间的虚拟专用网络连接的传输层连接传送的应用网络业务流的一个或多个传输层分组。 设备从被拦截的传输层分组的有效载荷中积累数据，确定用于传输的数据被压缩，并根据一个或多个压缩触发进行压缩，并将累积的数据压缩为独立的压缩块进行传输。

公开(公告)号：US20060253605A1

公开(公告)日：2006-11-09

申请号：US11323829

申请日：2005-12-30

申请人： Prabakar Sundarrajan ,  Junxiao He ,  Josephine Suganthi ,  Shashi Nanjundaswamy ,  Bharath Bhushan KR ,  Saravana Annamalaisami ,  Sergey Verzunov ,  Charu Venkatraman ,  Anil Shetty

发明人： Prabakar Sundarrajan ,  Junxiao He ,  Josephine Suganthi ,  Shashi Nanjundaswamy ,  Bharath Bhushan KR ,  Saravana Annamalaisami ,  Sergey Verzunov ,  Charu Venkatraman ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L69/04 ,  G06F8/60 ,  H04L69/08 ,  H04L69/10 ,  H04L69/32 ,  H04L69/326

摘要： The present invention is directed towards systems and methods for dynamically deploying and executing acceleration functionality on a client to improve the performance and delivery of remotely accessed applications. In one embodiment. The client-side acceleration functionality is provided by an acceleration program that performs a plurality of the following acceleration techniques in an integrated and efficient manner: 1) multi-protocol compression 2) transport control protocol pooling, 3) transport control protocol multiplexing 4) transport control protocol buffering, and 5) caching. The acceleration program establishes a transport layer connection between the client and server, and intercepts network packets at the transport layer. The acceleration program uses a kernel-level data structure to access the network packet intercepted at the transport layer, and performs subsequently one or more of the acceleration techniques on the intercepted network packet at one interface point or point of execution of the acceleration program.

摘要翻译： 本发明涉及用于在客户端上动态部署和执行加速功能以提高远程访问应用的性能和传送的系统和方法。 在一个实施例中。 客户端加速功能由集成有效的方式执行多种以下加速技术的加速程序提供：1）多协议压缩2）传输控制协议池3）传输控制协议复用4）传输 控制协议缓冲，以及5）缓存。 加速程序在客户端和服务器之间建立传输层连接，并拦截传输层的网络数据包。 加速程序使用内核级数据结构来访问在传输层拦截的网络分组，并且在加速程序的一个接口点或执行点处随后对截获的网络分组执行一个或多个加速技术。

公开(公告)号：US20130007239A1

公开(公告)日：2013-01-03

申请号：US13173216

申请日：2011-06-30

申请人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

发明人： Mugdha Agarwal ,  Josephine Suganthi ,  Saravana Annamalaisami ,  Jyotheesh Rao Kurma ,  Deepak Goel ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： H04L45/306 ,  H04L29/08 ,  H04L45/74 ,  H04L61/103 ,  H04L61/1511 ,  H04L63/02 ,  H04L63/0815 ,  H04L67/2814

摘要： The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine. The intermediary device may change a Media Access Control (MAC) address of a destination of the request to a MAC address of the selected machine. Once the selected machine processes the request, the intermediary device may receive from this machine a response to processing the request. The intermediary device may then continue processing the request of the client responsive to the response from the machine or in response to identifying that the response to the request is from that particular selected machine. The forwarding to and processing by the parallel deployed machine may be performed seamlessly and transparently to the server and/or client.

摘要翻译： 本解决方案旨在向任何客户端或服务器透明和无缝地提供客户端请求到与中间设备并行部署的设备的任何服务的重定向。部署在客户端和服务器之间的中间设备可以拦截客户端 请求并检查请求是否由与中间设备并行部署的设备之一提供的服务处理。 服务可以是用于处理，检查或修改请求的任何类型和形式的服务或特征，包括防火墙，缓存服务器，加密/解密引擎，安全设备，认证设备，授权设备或任何其他类型 以及本文描述的服务或设备的形式。 中间设备可以选择机器来处理请求，并使用第2层重定向到机器。 中间设备可以将请求的目的地的媒体访问控制（MAC）地址改变为所选择的机器的MAC地址。 一旦所选机器处理请求，中间设备可以从该机器接收对处理请求的响应。 响应于来自机器的响应或响应于识别对该请求的响应来自该特定的所选择的机器，中间设备可以继续处理客户端的请求。 并行部署的机器的转发和处理可以无缝地且透明地执行到服务器和/或客户端。

公开(公告)号：US20080046616A1

公开(公告)日：2008-02-21

申请号：US11465943

申请日：2006-08-21

申请人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

发明人： Sergey Verzunov ,  Charu Venkatraman ,  Junxiao He ,  Shashi Nanjundaswamy ,  Bharath Bhushan ,  Saravana Annamalaisami ,  Josephine Suganthi ,  Anil Shetty

IPC分类号： G06F13/12

CPC分类号： H04L69/04 ,  H04L63/0272 ,  H04L63/166 ,  H04L67/28 ,  H04W28/06 ,  H04W80/06

摘要： A method for compressing a stream of application layer network traffic communicated over a transport layer connection of a virtual private network connection between a client and a server using an appliance. The appliance intercepts one or more transport layer packets of a stream of application network traffic communicated via a transport layer connection of a virtual private network connection between a client and a server. The appliance accumulates data from a payload of the intercepted transport layer packets, determines data accumulated for transmission should be compressed based on one or more compression trigger, and compresses the accumulated data into a self-contained compression block for transmission.

摘要翻译： 一种用于压缩通过使用设备的客户端和服务器之间的虚拟专用网络连接的传输层连接上传送的应用层网络流量流的方法。 设备拦截通过客户端和服务器之间的虚拟专用网络连接的传输层连接传送的应用网络业务流的一个或多个传输层分组。 设备从被拦截的传输层分组的有效载荷中积累数据，确定用于传输的数据被压缩，并根据一个或多个压缩触发进行压缩，并将累积的数据压缩为独立的压缩块进行传输。

公开(公告)号：US20120072588A1

公开(公告)日：2012-03-22

申请号：US13302880

申请日：2011-11-22

申请人： Sandeep Kamath ,  Josephine Suganthi ,  Sergey Verzunov ,  Murali Raja ,  Anil Shetty

发明人： Sandeep Kamath ,  Josephine Suganthi ,  Sergey Verzunov ,  Murali Raja ,  Anil Shetty

IPC分类号： G06F15/173

CPC分类号： G06F9/505 ,  H04L67/1002 ,  H04L67/1008 ,  H04L67/101 ,  H04L67/1012 ,  H04L67/1029 ,  H04L67/1034

摘要： The present invention provides methods and systems for performing load balancing via a plurality of virtual servers upon a failover using metrics from a backup virtual server. The methods and systems described herein provide systems and methods for an appliance detecting that a first virtual server of a plurality of virtual servers having one or more backup virtual servers load balanced by an appliance is not available, identifying at least a first backup virtual server of a one or more backup virtual servers of the first virtual server is available, maintaining a status of the first virtual server as available in response to the identification, obtaining one or more metrics from the first backup virtual server of a one or more backup virtual servers, and determining the load across the plurality of virtual servers using the metrics obtained from the first backup virtual server associated with the first virtual server.

摘要翻译： 本发明提供了使用来自备份虚拟服务器的度量的故障转移时通过多个虚拟服务器执行负载平衡的方法和系统。 本文所述的方法和系统提供用于设备的系统和方法，该系统和方法检测具有由设备负载平衡的一个或多个备份虚拟服务器的多个虚拟服务器的第一虚拟服务器不可用，至少识别至少第一备份虚拟服务器 第一虚拟服务器的一个或多个备份虚拟服务器可用，响应于该标识将第一虚拟服务器的状态维持为可用，从一个或多个备份虚拟服务器的第一备份虚拟服务器获取一个或多个度量 以及使用从与所述第一虚拟服务器相关联的所述第一备份虚拟服务器获得的度量来确定所述多个虚拟服务器之间的负载。