METHOD AND SYSTEM FOR DATA PLANE ABSTRACTION TO ENABLE A DYNAMIC CREATION OF NETWORK APPLICATIONS
    1.
    发明申请
    METHOD AND SYSTEM FOR DATA PLANE ABSTRACTION TO ENABLE A DYNAMIC CREATION OF NETWORK APPLICATIONS 有权
    用于数据平面提取的方法和系统,以实现网络应用的动态创建

    公开(公告)号:US20140237456A1

    公开(公告)日:2014-08-21

    申请号:US13771026

    申请日:2013-02-19

    IPC分类号: G06F9/45

    CPC分类号: G06F8/41 H04L67/10 H04L67/34

    摘要: The method includes receiving, by a data plane definition language compiler, a first data plane definition describing customized functionality of a data plane of a first network application, and compiling the data plane definition to generate a first set of customized data processing modules and a program interface that allows a control plane of the network application to access the first set of customized data processing modules. The method also includes loading the first set of customized data processing modules into a data plane container, wherein the network application is executed via a network operating system, and wherein, upon execution of the network application the customized data processing module causes the data plane container of the network application to process packets differently than prior to loading the customized data processing module in the data plane container.

    摘要翻译: 该方法包括通过数据平面定义语言编译器接收描述第一网络应用的数据平面的定制功能的第一数据平面定义,以及编译数据平面定义以生成第一组定制数据处理模块和程序 接口,允许网络应用程序的控制平面访问第一组定制数据处理模块。 该方法还包括将第一组定制数据处理模块加载到数据平面容器中,其中通过网络操作系统执行网络应用,并且其中,在执行网络应用时,定制数据处理模块使数据平面容器 的网络应用程序处理数据包的方式与将数据处理模块加载到数据平面容器之前不同。

    METHOD AND SYSTEM FOR MANAGING INTERCONNECTION OF VIRTUAL NETWORK FUNCTIONS
    2.
    发明申请
    METHOD AND SYSTEM FOR MANAGING INTERCONNECTION OF VIRTUAL NETWORK FUNCTIONS 有权
    管理虚拟网络功能互连的方法和系统

    公开(公告)号:US20150295750A1

    公开(公告)日:2015-10-15

    申请号:US14253775

    申请日:2014-04-15

    IPC分类号: H04L12/24 G06F11/18

    摘要: A method and apparatus is disclosed herein for use of a connectivity manager and a network infrastructure including the same. In one embodiment, the network infrastructure comprises one or more physical devices communicably coupled into a physical network infrastructure or via the overlay provided by the physical servers; and a virtual network domain containing a virtual network infrastructure executing on the physical network infrastructure. In one embodiment, the virtual network domain comprises one or more virtual network functions connected together through one or more links and executing on the one or more physical devices, and one or more interfaces coupled to one or more network functions via one or more links to communicate data between the virtual network domain and at least one of the one or more physical devices of the physical network infrastructure while the virtual network domain is isolated from other virtual infrastructures executing on the physical network infrastructure.

    摘要翻译: 本文公开了一种使用连接管理器和包括其的网络基础设施的方法和装置。 在一个实施例中,网络基础设施包括可通信地耦合到物理网络基础设施中或经由物理服务器提供的覆盖物的一个或多个物理设备; 以及包含在物理网络基础设施上执行的虚拟网络基础设施的虚拟网络域。 在一个实施例中,虚拟网络域包括通过一个或多个链路连接在一起并在一个或多个物理设备上执行的一个或多个虚拟网络功能,以及经由一个或多个链路耦合到一个或多个网络功能的一个或多个接口 在虚拟网络域与物理网络基础设施上执行的其他虚拟基础设施隔离的同时,在虚拟网络域与物理网络基础设施的一个或多个物理设备中的至少一个之间传送数据。

    Compact instruction format for content search systems
    4.
    发明授权
    Compact instruction format for content search systems 失效
    内容搜索系统的紧凑指令格式

    公开(公告)号:US08516456B1

    公开(公告)日:2013-08-20

    申请号:US12944442

    申请日:2010-11-11

    IPC分类号: G06F9/45

    摘要: A system and method are disclosed that compiles a sub-expression associated with an inexact pattern contained in a regular expression into a plurality of microprogram instructions that can be stored in contiguous locations of an instruction memory. At least one of the microprogram instructions includes a next instruction address and a fetch length value, where the next instruction address indicates the instruction memory address of the next instruction to be executed and the fetch length value indicates the number of sequentially-executed instructions that are to be fetched from contiguous locations of the instruction memory.

    摘要翻译: 公开了一种系统和方法,其将与正则表达式中包含的不精确模式相关联的子表达式编译成可存储在指令存储器的连续位置中的多个微程序指令。 微程序指令中的至少一个包括下一个指令地址和读取长度值,其中下一个指令地址指示要执行的下一个指令的指令存储器地址,并且获取长度值指示顺序执行的指令的数量 从指令存储器的连续位置获取。

    Negative regular expression search operations
    5.
    发明授权
    Negative regular expression search operations 失效
    负正则表达式搜索操作

    公开(公告)号:US08527488B1

    公开(公告)日:2013-09-03

    申请号:US12832862

    申请日:2010-07-08

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30985

    摘要: A content search system determines whether an input string matches a negative regular expression that includes a negative pattern and an optional positive pattern. If the input string matches the positive pattern and does not match the negative pattern, a match between the input string and the negative regular expression is indicated. The positive pattern and the negative pattern may be compared to the input string in a single pass of the input string. The content search system may be implemented in a content addressable memory (CAM) device. The negative regular expression may specify a particular portion of the input string, such as a range of characters or bytes of a data packet, in which the negative pattern should not match for a match between the negative regular expression and the input pattern to be indicated.

    摘要翻译: 内容搜索系统确定输入字符串是否匹配包含负模式和可选正模式的负正则表达式。 如果输入字符串与正模式匹配并且与负模式不匹配,则指示输入字符串与负正则表达式之间的匹配。 可以在输入串的单次通过中将正模式和负模式与输入字符串进行比较。 内容搜索系统可以在内容可寻址存储器(CAM)设备中实现。 负正则表达式可以指定输入字符串的特定部分,例如数据分组的字符或字节的范围,其中负模式不应与负正则表达式和要指示的输入模式之间的匹配匹配 。

    Targeted search system with de-obfuscating functionality
    7.
    发明授权
    Targeted search system with de-obfuscating functionality 有权
    具有消除模糊功能的目标搜索系统

    公开(公告)号:US08812480B1

    公开(公告)日:2014-08-19

    申请号:US13355051

    申请日:2012-01-20

    IPC分类号: G06F17/30

    摘要: A content search system for determining whether an input string matches one or more rules includes a parser, a rules database, and a search engine. The parser, which has an input to receive the input string, is to extract one or more selected portions of the input string to form a filtered input string, and is to generate a rule select signal in response to the selected portions of the input string. The rules database stores a plurality of sets of rules. The search engine is to compare the filtered input string with a selected set of rules selected in response to the rule select signal.

    摘要翻译: 用于确定输入字符串是否匹配一个或多个规则的内容搜索系统包括解析器,规则数据库和搜索引擎。 具有用于接收输入字符串的输入的解析器是提取输入字符串的一个或多个所选部分以形成经滤波的输入字符串,并且响应于输入字符串的所选部分生成规则选择信号 。 规则数据库存储多组规则。 搜索引擎将滤波后的输入字符串与响应于规则选择信号选择的一组规则进行比较。