APPARATUS AND METHOD FOR BALANCING LOAD ACROSS MULTIPLE PACKET PROCESSING ENGINES
    4.
    发明申请
    APPARATUS AND METHOD FOR BALANCING LOAD ACROSS MULTIPLE PACKET PROCESSING ENGINES 有权
    用于通过多个分组处理引擎平衡负载的装置和方法

    公开(公告)号:US20120147891A1

    公开(公告)日:2012-06-14

    申请号:US13323178

    申请日:2011-12-12

    IPC分类号: H04L12/56

    CPC分类号: H04L47/125

    摘要: A distributed packet processing apparatus capable of distributing packet load across a plurality of packet processing engines is provided. The distributed packet processing apparatus includes a plurality of processing engines each configured to process allocated packets, a first tag generating unit configured to allocate an input packet to a processing engine, which has a processing engine index corresponding to a tag index for the input packet, among the plurality of processing engines, a second tag generating unit configured to calculate a tag index for an output packet, and an index conversion unit configure to convert the tag index for the output packet to one processing engine index among a plurality of processing indexes for the plurality of the processing engines and allocates the output packet to a processing engine having the one processing engine such that loads are distributed among the plurality of processing engines.

    摘要翻译: 提供能够跨多个分组处理引擎分发分组负载的分布式分组处理装置。 分布式分组处理装置包括:处理分配的分组的多个处理引擎,第一标签生成单元,被配置为向处理引擎分配输入分组,处理引擎具有与输入分组的标签索引对应的处理引擎索引, 在所述多个处理引擎中,第二标签生成单元,被配置为计算输出分组的标签索引,以及索引变换单元,其将所述输出分组的标签索引转换为多个处理索引中的多个处理索引, 所述多个处理引擎并将所述输出分组分配给具有所述一个处理引擎的处理引擎,使得在所述多个处理引擎之间分配负载。

    Apparatus and method for balancing load across multiple packet processing engines
    5.
    发明授权
    Apparatus and method for balancing load across multiple packet processing engines 有权
    用于平衡多个分组处理引擎的负载的装置和方法

    公开(公告)号:US08885646B2

    公开(公告)日:2014-11-11

    申请号:US13323178

    申请日:2011-12-12

    IPC分类号: H04L12/28 H04L12/803

    CPC分类号: H04L47/125

    摘要: A distributed packet processing apparatus capable of distributing packet load across a plurality of packet processing engines is provided. The distributed packet processing apparatus includes a plurality of processing engines each configured to process allocated packets, a first tag generating unit configured to allocate an input packet to a processing engine, which has a processing engine index corresponding to a tag index for the input packet, among the plurality of processing engines, a second tag generating unit configured to calculate a tag index for an output packet, and an index conversion unit configure to convert the tag index for the output packet to one processing engine index among a plurality of processing indexes for the plurality of the processing engines and allocates the output packet to a processing engine having the one processing engine index such that loads are distributed among the plurality of processing engines.

    摘要翻译: 提供能够跨多个分组处理引擎分发分组负载的分布式分组处理装置。 分布式分组处理装置包括:处理分配的分组的多个处理引擎,第一标签生成单元,被配置为向处理引擎分配输入分组,处理引擎具有与输入分组的标签索引对应的处理引擎索引, 在所述多个处理引擎中,第二标签生成单元,被配置为计算输出分组的标签索引,以及索引变换单元,其将所述输出分组的标签索引转换为多个处理索引中的多个处理索引, 多个处理引擎,并且将输出分组分配给具有一个处理引擎索引的处理引擎,使得负载分布在多个处理引擎之间。

    HIGH-SPEED CONTENT INSPECTION APPARATUS FOR MINIMIZING SYSTEM OVERHEAD
    6.
    发明申请
    HIGH-SPEED CONTENT INSPECTION APPARATUS FOR MINIMIZING SYSTEM OVERHEAD 审中-公开
    用于最小化系统的高速内容检查装置

    公开(公告)号:US20120147754A1

    公开(公告)日:2012-06-14

    申请号:US13324416

    申请日:2011-12-13

    IPC分类号: H04J3/14

    CPC分类号: H04L43/028

    摘要: A high-speed content inspection apparatus for minimizing system overhead is provided. The high-speed content inspection apparatus extracts content in unit of sub-pattern by inspecting a payload of a packet in units of sub-pattern, and extract target content by inspecting a correlation between the extracted sub-patterns. If a sub-pattern present at the end of a payload is smaller than a predetermined unit of a sub-pattern, position information of the sub-pattern at the end of the payload is rolled back and the correlation is inspected. Accordingly, without having to add another hardware or high-performance hardware, target content can be efficiently detected in real time.

    摘要翻译: 提供了一种用于最小化系统开销的高速内容检查装置。 高速内容检查装置以子图案为单位检查分组的有效载荷,以子图案为单位提取内容,并通过检查提取的子模式之间的相关性来提取目标内容。 如果存在于有效负载结束处的子模式小于子模式的预定单元,则在有效负载结束时的子模式的位置信息被回滚并且检查相关性。 因此,无需添加另一硬件或高性能硬件,可以实时有效地检测目标内容。

    FLOW-BASED DYNAMIC ACCESS CONTROL SYSTEM AND METHOD
    7.
    发明申请
    FLOW-BASED DYNAMIC ACCESS CONTROL SYSTEM AND METHOD 审中-公开
    基于流动的动态访问控制系统和方法

    公开(公告)号:US20110023088A1

    公开(公告)日:2011-01-27

    申请号:US12842194

    申请日:2010-07-23

    IPC分类号: G06F21/20

    CPC分类号: H04L63/1441 H04L63/102

    摘要: A traffic analysis and flow-based dynamic access control system and method. The flow-based dynamic access control system for controlling a user's access to an internal communication network through an external communication network includes an access control unit operating in an access control mode in which traffic received from a user is basically blocked, generating state management information of a flow, which is received from the user, based on a specified packet of the flow, and verifying whether access of the flow to the internal communication network is a normal access. As a proactive defense concept of allowing only normal users to access an internal network, a method of blocking attacks from a system contaminated by a worm virus, detecting a cyber attack on a certain system in advance and automatically avoiding the cyber attack, and guaranteeing the quality of normal traffic even under cyber attacks without performance degradation of the internal network is provided.

    摘要翻译: 一种流量分析和流量动态访问控制系统及方法。 用于通过外部通信网络控制用户对内部通信网络的访问的基于流的动态访问控制系统包括以访问控制模式操作的访问控制单元,其中从用户接收的业务基本上被阻止,生成状态管理信息 从用户接收的流,基于流的指定分组,以及验证到内部通信网络的流的访问是否是正常访问。 作为只允许正常用户访问内部网络的主动防御概念,阻止来自受病毒感染的系统的攻击的方法,提前检测某个系统的网络攻击并自动避免网络攻击,并保证 提供即使在网络攻击下正常流量的质量,也不会导致内部网络性能下降。