公开(公告)号：US06980547B1

公开(公告)日：2005-12-27

申请号：US09702630

申请日：2000-10-31

申请人： Robert G. Gally ,  Eric W. Multanen ,  Per F. Hansen

发明人： Robert G. Gally ,  Eric W. Multanen ,  Per F. Hansen

IPC分类号： H04L12/28 ,  H04L12/56

CPC分类号： H04L49/351 ,  H04L49/101 ,  H04L49/201 ,  H04L49/3009

摘要： A method and system for providing a remote switching engine to monitor and control network traffic and utilizing appended word source address port mapping is provided. The system comprises a number of ports, at least one local switching device, at least one local forwarding database, and a remote switching processing device. The ports are provided for sending and receiving frames. The local switching device performs high-speed switching. The local forwarding database corresponds and couples to the local switching device, the database allowing the local switching device to look up a known address that has been previously obtained and forward the frames based on the known address. The remote switching processing device receives and processes frames from the local switching device(s). The local switching device(s) learns associations between Media Access Control (MAC) addresses and ports by having the local switching device forward unknown address frames to the remote switching processing device. The remote switching processing device update the local forwarding database corresponding to the local switching device based on the forwarded frames, utilizing the appended word source address mapping. The appended word of a frame transmitted from one switching device to another switching device has encoded within an ingress engine number and port number.

摘要翻译： 提供了一种用于提供远程交换引擎来监视和控制网络流量并利用附加字源地址端口映射的方法和系统。 该系统包括多个端口，至少一个本地交换设备，至少一个本地转发数据库和远程交换处理设备。 端口用于发送和接收帧。 本地交换设备执行高速切换。 本地转发数据库对应并耦合到本地交换设备，数据库允许本地交换设备查找先前已经获得的已知地址，并且基于已知地址转发帧。 远程交换处理设备接收并处理来自本地交换设备的帧。 通过使本地交换设备将未知地址帧转发到远程交换处理设备，本地交换设备学习媒体访问控制（MAC）地址和端口之间的关联。 远程交换处理装置利用所附加的字源地址映射，基于转发的帧来更新对应于本地交换设备的本地转发数据库。 从一个交换设备发送到另一交换设备的帧的附加字已经在入口引擎号码和端口号内编码。

公开(公告)号：US20240241944A1

公开(公告)日：2024-07-18

申请号：US18619826

申请日：2024-03-28

申请人： Ned M. Smith ,  Kshitij Arun Doshi ,  Adrian Hoban ,  Eric W. Multanen ,  Malini Bhandaru ,  Sunil Cheruvu ,  Thijs Metsch ,  Manjunath Ranganathaiah ,  Anahit Tarkhanyan ,  Sharad Mishra ,  Igor Duarte Cardoso ,  Todd Malsbary ,  Bruno Vavala ,  Adarsh Chittilapplly ,  Subin John ,  Alpesh Ramesh Rodage

发明人： Ned M. Smith ,  Kshitij Arun Doshi ,  Adrian Hoban ,  Eric W. Multanen ,  Malini Bhandaru ,  Sunil Cheruvu ,  Thijs Metsch ,  Manjunath Ranganathaiah ,  Anahit Tarkhanyan ,  Sharad Mishra ,  Igor Duarte Cardoso ,  Todd Malsbary ,  Bruno Vavala ,  Adarsh Chittilapplly ,  Subin John ,  Alpesh Ramesh Rodage

IPC分类号： G06F21/54

CPC分类号： G06F21/54 ,  G06F2221/033

摘要： Various systems and methods are described for implementing security intents for the execution of workloads in cloud-to-edge (C2E) and cloud-native execution environments. An example technique for implementing security intents for a workload on a computing node of a cluster includes: identifying a workload for execution on the computing node; identifying security intents that define levels of respective security requirements for the execution of the workload on the computing node; adapting an execution environment of the computing node, based on the identified security intents; and controlling the execution of the workload within the execution environment, based on the identified security intents, to dynamically monitor and adapt to changing security conditions during the execution of the workload.

公开(公告)号：US20240259465A1

公开(公告)日：2024-08-01

申请号：US18619949

申请日：2024-03-28

申请人： Igor Duarte Cardoso ,  Todd Malsbary ,  Eric W. Multanen ,  Malini Bhandaru ,  Kshitij Arun Doshi ,  Ned M. Smith ,  Sunil Cheruvu ,  Anahit Tarkhanyan ,  Mats Gustav Agerstam

发明人： Igor Duarte Cardoso ,  Todd Malsbary ,  Eric W. Multanen ,  Malini Bhandaru ,  Kshitij Arun Doshi ,  Ned M. Smith ,  Sunil Cheruvu ,  Anahit Tarkhanyan ,  Mats Gustav Agerstam

IPC分类号： H04L67/10 ,  G06F11/30 ,  G06F21/57

CPC分类号： H04L67/10 ,  G06F11/3006 ,  G06F21/577

摘要： Various systems and methods for providing intent-based workload orchestration described herein. A data center system may include a plurality of compute nodes and an orchestration node. The orchestration node may be configured to identify a workload for execution on the plurality of compute nodes; identify intents that define requirements for the execution of the workload on the plurality of compute nodes; monitor the execution of the workload to produce monitoring data; and control the execution of the workload based on the intents and the monitoring data, to dynamically adapt to changed conditions during the execution of the workload.

公开(公告)号：US20150341273A1

公开(公告)日：2015-11-26

申请号：US14285028

申请日：2014-05-22

申请人： Ygdal Naouri ,  Robert O. Sharp ,  Kenneth G. Keels ,  Eric W. Multanen

发明人： Ygdal Naouri ,  Robert O. Sharp ,  Kenneth G. Keels ,  Eric W. Multanen

IPC分类号： H04L12/801 ,  H04L12/26 ,  H04L12/807 ,  H04L12/911

CPC分类号： H04L47/18 ,  H04L12/4633 ,  H04L43/0858 ,  H04L43/0864 ,  H04L43/16 ,  H04L47/27 ,  H04L47/822

摘要： Methods, apparatus and software for implementing enhanced data center congestion management for non-TCP traffic. Non-congested transmit latencies are determined for transmission of packets or Ethernet frames along paths between source and destination end-end-nodes when congestion along the paths is not present or minimal. Transmit latencies are similarly measured along the same source-destination paths during ongoing operations during which traffic congestion may vary. Based on whether a difference between the transmit latency for a packet or frame and the non-congested transmit latency for the path exceeds a threshold, the path is marked as congested or not congested. A rate at which the non-TCP packets are transmitted along the path is then managed as function of a rate at which the path is marked as congested. In one implementation, non-TCP traffic is managed by mimicking a Data Center TCP technique, under which the congestion marking status of the path is substituted as an input to a DCTP algorithm in place of the normally-used ECN-Echo flag input. The congestion window output by the DCTCP algorithm is then used to manage the rate at which non-TCP packets to be forwarded via the path are transmitted from a source end-node.

摘要翻译： 用于实现非TCP流量增强数据中心拥塞管理的方法，设备和软件。 确定沿着路径的拥塞不存在或最小时，沿着源端和目的端端节点之间的路径传输分组或以太网帧的非拥塞发送延迟。 在正在进行的操作期间，沿着相同的源 - 目的地路径类似地测量发射延迟，在此期间，业务拥塞可能变化。 基于分组或帧的发送等待时间与路径的非拥塞发送等待时间之间的差是否超过阈值，路径被标记为拥塞或不拥塞。 然后，以路径被标记为拥塞的速率的函数来管理沿着路径发送非TCP分组的速率。 在一个实现中，通过模拟数据中心TCP技术来管理非TCP流量，在该技术下，将路径的拥塞标记状态替换为DCTP算法的输入来代替常用的ECN-Echo标志输入。 然后使用DCTCP算法输出的拥塞窗口来管理从源端节点传送经由路径转发的非TCP分组的速率。