-
公开(公告)号:US20190394281A1
公开(公告)日:2019-12-26
申请号:US16125792
申请日:2018-09-10
申请人: NICIRA, INC.
发明人: Nilesh Awate , Vivek Parikh , Amit Vasant Patil , Vaibhav Rekhate
IPC分类号: H04L29/08 , G06F9/455 , H04L29/12 , H04L12/725 , H04L12/721 , H04L12/741
摘要: Described herein are systems, methods, and software to enhance packet . In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.
-
公开(公告)号:US11811879B2
公开(公告)日:2023-11-07
申请号:US17745228
申请日:2022-05-16
申请人: Nicira, Inc.
发明人: Nilesh Awate , Vivek Parikh , Amit Vasant Patil , Vaibhav Rekhate
IPC分类号: G06F15/16 , H04L67/141 , G06F9/455 , H04L45/302 , H04L45/745 , H04L45/00 , H04L61/4552 , H04L67/10 , H04L101/365
CPC分类号: H04L67/141 , G06F9/45558 , H04L45/306 , H04L45/72 , H04L45/745 , H04L61/4552 , G06F2009/45562 , H04L67/10 , H04L2101/365
摘要: Described herein are systems, methods, and software to enhance packet processing. In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.
-
公开(公告)号:US11888899B2
公开(公告)日:2024-01-30
申请号:US15915096
申请日:2018-03-08
申请人: NICIRA, INC.
CPC分类号: H04L63/20 , H04L45/38 , H04L47/20 , H04L49/70 , H04L63/0263 , H04L63/0272 , H04L67/12
摘要: Example methods are provided for flow-based forwarding element configuration in a network environment. An example method may comprise obtaining a set of security policies associated with the group of workloads; and based on the set of security policies, identifying an allowed forwarding path between a destination and a first workload. The method may also comprise configuring a whitelist set of flow entries and sending configuration information to the flow-based forwarding element to cause the flow-based forwarding element to apply the whitelist set. The whitelist set may include a first flow entry specifying match fields and a first action to allow communication over the allowed forwarding path, but excludes a second flow entry specifying a second action to block communication over a forbidden forwarding path between the destination and the second workload. The match fields may include transport layer information and network layer information.
-
公开(公告)号:US20220279044A1
公开(公告)日:2022-09-01
申请号:US17745228
申请日:2022-05-16
申请人: Nicira, Inc.
发明人: Nilesh Awate , Vivek Parikh , Amit Vasant Patil , Vaibhav Rekhate
IPC分类号: H04L67/141 , G06F9/455 , H04L45/302 , H04L45/745 , H04L45/00 , H04L61/4552
摘要: Described herein are systems, methods, and software to enhance packet processing. In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.
-
公开(公告)号:US11336733B2
公开(公告)日:2022-05-17
申请号:US16125792
申请日:2018-09-10
申请人: NICIRA, INC.
发明人: Nilesh Awate , Vivek Parikh , Amit Vasant Patil , Vaibhav Rekhate
IPC分类号: G06F15/16 , H04L67/141 , G06F9/455 , H04L61/4552 , H04L45/30 , H04L45/745 , H04L45/00 , H04L67/10 , H04L101/365
摘要: Described herein are systems, methods, and software to enhance packet . In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.
-
-
-
-