Secure protocol handshake offload using TNICs
    1.
    发明授权
    Secure protocol handshake offload using TNICs 有权
    使用TNIC安全协议握手卸载

    公开(公告)号:US07631182B1

    公开(公告)日:2009-12-08

    申请号:US11165990

    申请日:2005-06-24

    IPC分类号: H04L29/06

    CPC分类号: H04L63/06 H04L63/166

    摘要: A method for offloading a secure protocol handshake. The method includes establishing a connection between a host system and a remote peer, and determining whether the secure protocol handshake is offloaded to a network interface card (NIC). When the secure protocol handshake is offloaded to the NIC, an offload request is sent to offload the secure protocol handshake, where the offload request includes a value of at least one cryptographic key. The method further includes performing cryptographic operations associated with the secure protocol handshake using the value of at least one cryptographic key to obtain at least one secret key, and returning a status of the secure protocol handshake to the host system.

    摘要翻译: 一种卸载安全协议握手的方法。 该方法包括建立主机系统和远程对等体之间的连接,以及确定安全协议握手是否被卸载到网络接口卡(NIC)。 当安全协议握手被卸载到NIC时,发送卸载请求以卸载安全协议握手,其中卸载请求包括至少一个加密密钥的值。 该方法还包括使用至少一个加密密钥的值来执行与安全协议握手相关联的加密操作,以获得至少一个秘密密钥,以及将安全协议握手的状态返回给主机系统。

    Network interface decryption and classification technique
    2.
    发明授权
    Network interface decryption and classification technique 有权
    网络接口解密和分类技术

    公开(公告)号:US07607168B1

    公开(公告)日:2009-10-20

    申请号:US11112436

    申请日:2005-04-22

    IPC分类号: G06F9/00 G06F17/00 G06F19/00

    摘要: Encrypted data packets are received by a network interface card. The network interface card, upon determining that the received data packets are encrypted, directs the encrypted data packets to decryption hardware in the network interface card. The decryption hardware decrypts the encrypted data packets and forwards the decrypted data packets to a hardware classifier that classifies the decrypted data packets and directs the classified decrypted data packets to the appropriate receive resource(s) of the network interface card.

    摘要翻译: 加密的数据包由网络接口​​卡接收。 网络接口卡在确定接收到的数据分组被加密后,将加密的数据分组引导到网络接口卡中的解密硬件。 解密硬件解密加密的数据分组,并将解密的数据分组转发到对分类解密的数据分组进行分类的硬件分类器,并将分类的解密的数据分组引导到网络接口卡的适当的接收资源。

    Hardware-based network interface per-ring resource accounting
    3.
    发明授权
    Hardware-based network interface per-ring resource accounting 有权
    基于硬件的网络接口每环资源计费

    公开(公告)号:US07623538B1

    公开(公告)日:2009-11-24

    申请号:US11112222

    申请日:2005-04-22

    IPC分类号: H04L12/28 H04L12/66

    CPC分类号: H04L49/9063 H04L49/90

    摘要: Incoming/outgoing data packets to/from a network are processed by associated receive/send rings of a network interface. A plurality of counters, disposed in hardware, are each associated with particular receive/send rings. Each of the plurality of counters maintains a count of a number of data packets processed by an associated receive/send ring.

    摘要翻译: 来往/来自网络的传入/传出数据分组由网络接口​​的关联接收/发送振铃进行处理。 设置在硬件中的多个计数器各自与特定的接收/发送环相关联。 多个计数器中的每一个维护由相关联的接收/发送环处理的数量分组的数量的计数。

    Adapting network communication to asynchronous interfaces and methods
    4.
    发明授权
    Adapting network communication to asynchronous interfaces and methods 有权
    适应网络通信异步接口和方法

    公开(公告)号:US07769905B1

    公开(公告)日:2010-08-03

    申请号:US11173383

    申请日:2005-06-30

    IPC分类号: G06F15/16

    摘要: A method for receiving network communication at a host is provided. The host has a network interface card (NIC) for receiving the network communication from a network. Data is requested through an application. A set of buffers (e.g., A, B, C, . . . ) is posted to system memory. Information regarding the set of buffers is passed to an adaptation layer. The adaptation layer is interposed between a socket layer and a transport layer of the protocol stack. The set of buffers identified in the adaptation layer is assigned expected sequence numbers (e.g., SN1, SN2, SN3 . . . ) for a sequence of incoming data (e.g., S1, S2, S3, . . . ). The adaptation layer reshuffles data of the sequence of incoming data to the set of buffers according to the expected sequence numbers. The expected sequence numbers are consecutively ordered to ensure that the sequence of incoming data in the ordered sequence is placed to the set of buffers according to the expected sequence numbers.

    摘要翻译: 提供了一种用于在主机处接收网络通信的方法。 主机具有用于从网络接收网络通信的网络接口卡(NIC)。 通过应用程序请求数据。 一组缓冲器(例如,A,B,C ...)被发布到系统存储器。 关于缓冲器组的信息被传递到适配层。 适配层介于协议栈的套接字层和传输层之间。 在适配层中标识的缓冲器组被分配用于输入数据序列(例如,S1,S2,S3,...)的预期序列号(例如,SN1,SN2,SN3 ...)。 适配层根据预期的序列号将输入数据序列的数据重新组合到缓冲器组。 预期的序列号被连续排序,以确保有序序列中的输入数据的顺序根据预期的序列号被放置到缓冲器集合。

    Low impact network debugging
    5.
    发明授权
    Low impact network debugging 有权
    低影响网络调试

    公开(公告)号:US08050266B2

    公开(公告)日:2011-11-01

    申请号:US11489926

    申请日:2006-07-20

    IPC分类号: H04L12/28

    CPC分类号: H04L43/50

    摘要: A method for debugging network connections that involves receiving a packet for a first destination by a network interface card (NIC), classifying the packet, sending the packet to a first receive ring associated with the NIC, and sending the packet from the first receive ring to a first virtual NIC, where the first virtual NIC is associated with a second destination, and where the second destination is used to debug the first destination.

    摘要翻译: 一种用于调试网络连接的方法,其涉及通过网络接口卡(NIC)接收用于第一目的地的分组,对所述分组进行分类,将分组发送到与所述NIC相关联的第一接收环,以及从所述第一接收环发送分组 到第一虚拟NIC,其中第一虚拟NIC与第二目的地相关联,并且其中第二目的地用于调试第一目的地。

    Low impact network debugging
    6.
    发明申请
    Low impact network debugging 有权
    低影响网络调试

    公开(公告)号:US20080043632A1

    公开(公告)日:2008-02-21

    申请号:US11489926

    申请日:2006-07-20

    IPC分类号: H04J3/14

    CPC分类号: H04L43/50

    摘要: A method for debugging network connections that involves receiving a packet for a first destination by a network interface card (NIC), classifying the packet, sending the packet to a first receive ring associated with the NIC, and sending the packet from the first receive ring to a first virtual NIC, where the first virtual NIC is associated with a second destination, and where the second destination is used to debug the first destination.

    摘要翻译: 一种用于调试网络连接的方法,其涉及通过网络接口卡(NIC)接收用于第一目的地的分组,对所述分组进行分类,将分组发送到与所述NIC相关联的第一接收环,以及从所述第一接收环发送分组 到第一虚拟NIC,其中第一虚拟NIC与第二目的地相关联,并且其中第二目的地用于调试第一目的地。

    Method and system for associating multiple payload buffers with multidata message
    7.
    发明授权
    Method and system for associating multiple payload buffers with multidata message 有权
    将多个有效载荷缓冲区与多数据消息相关联的方法和系统

    公开(公告)号:US07532644B1

    公开(公告)日:2009-05-12

    申请号:US11044382

    申请日:2005-01-26

    IPC分类号: H04J3/16 H04L12/54 H04L12/56

    摘要: A multidata framework is provided to allow multiple payload buffers to be associated with a single multidata message. In the multidata framework of the present invention, a number of payload buffers are associated with the multidata following allocation of the multidata header buffer. The number of payload buffers can reside at disjoint virtual address locations in memory. Each payload buffer is assigned an index for identification purposes. A number of packets are defined to represent the multidata message. Each packet includes a header portion and a payload portion. The payload portion is defined as a set of payload spans. Each payload span is mapped to the payload portion of the appropriate packet by an appropriate payload buffer index and address range in the appropriate payload buffer. Thus, a packet's payload portion can include payload spans that are located at disjoint virtual address location in memory.

    摘要翻译: 提供了多数据框架,以允许多个有效负载缓冲区与单个多数据消息相关联。 在本发明的多数据框架中,多个有效负载缓冲器与多数据头缓冲器的分配之后的多数据库相关联。 有效载荷缓冲区的数量可以驻留在存储器中的不相交的虚拟地址位置。 为每个有效负载缓冲区分配一个用于识别目的的索引。 定义了多个数据包来表示多数据消息。 每个分组包括报头部分和有效载荷部分。 有效载荷部分被定义为一组有效载荷跨度。 每个有效载荷跨度通过适当的有效载荷缓冲器索引和适当的有效载荷缓冲器中的地址范围映射到适当的分组的有效载荷部分。 因此,分组的有效载荷部分可以包括位于存储器中的不相交的虚拟地址位置的有效载荷跨度。

    Method for receiving network communication and apparatus for performing the same
    8.
    发明授权
    Method for receiving network communication and apparatus for performing the same 有权
    接收网络通信的方法及其执行方法

    公开(公告)号:US07502870B1

    公开(公告)日:2009-03-10

    申请号:US10917995

    申请日:2004-08-13

    IPC分类号: G06F15/16 G06F12/00

    CPC分类号: H04L12/40032

    摘要: A host memory location pointer is posted from a host device to a network interface card (NIC) attached to the host device prior to receipt at the NIC of data to be placed in the host memory location corresponding to the pointer. Posting the host memory location pointer serves to surrender ownership of the host memory location from the host device to the NIC. Data received at the NIC is placed in the host memory location corresponding to the pointer. Furthermore, the NIC operates to prevent placement of the data in a portion of the host memory where data has been previously placed by the NIC. Also, the host device operates to re-assume ownership of the portion of the host memory having data placed therein by the NIC without actively reclaiming ownership of the portion of the host memory location from the NIC.

    摘要翻译: 主机存储器位置指针从主机设备被发送到连接到主机设备的网络接口卡(NIC),然后在NIC处接收要放置在与指针对应的主机存储单元中的数据。 发布主机内存位置指针用于将主机内存位置的所有权从主机设备转交给NIC。 在NIC处接收的数据被放置在与指针相对应的主机存储单元中。 此外,NIC操作以防止将数据放置在主机存储器中由NIC先前放置数据的部分中。 此外,主机设备操作以重新承担具有由NIC放置在其中的数据的主机存储器的一部分的所有权,而不主动地从主机回收主机存储器位置的部分的所有权。