公开(公告)号：US07443787B2

公开(公告)日：2008-10-28

申请号：US11016484

申请日：2004-12-17

申请人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

发明人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

IPC分类号： H04J1/16 ,  H04J3/14

CPC分类号： H04L69/40

摘要： Distribution processing control unit determines a main processing range and a sub-processing range whose charges are taken by a cluster member to which the unit belongs. Among packets multicast to a cluster system, a filter hands over packets matching with the main processing range and the sub-processing range to a session processing unit. The session processing unit conducts session processing (including processing of updating session information stored in a holding unit). Thereafter, when the packet matches with the main processing range, the session processing unit hands the packet over to a packet forwarding unit and when the packet matches with the sub-processing range, abandons the packet. When a cluster member in charge of main processing of a packet whose sub-processing is taken charge of by the cluster member in question develops a failure, a failure recovery unit changes the sub-processing range to the main processing range.

摘要翻译： 分发处理控制单元确定主要处理范围和由该单元所属的群集成员拍摄费用的子处理范围。 在组播到集群系统的分组中，过滤器将与主处理范围和子处理范围匹配的分组交给会话处理单元。 会话处理单元进行会话处理（包括更新存储在保持单元中的会话信息的更新处理）。 此后，当分组与主处理范围匹配时，会话处理单元将分组交给分组转发单元，并且当分组与子处理范围匹配时，放弃该分组。 负责主处理由该问题的集群成员进行了子处理的分组的集群成员发生故障时，故障恢复部将副处理范围变更为主处理范围。

公开(公告)号：US20050135343A1

公开(公告)日：2005-06-23

申请号：US11016484

申请日：2004-12-17

申请人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

发明人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

IPC分类号： H04L12/707 ,  G06F13/00 ,  H04L12/66 ,  H04L12/713 ,  H04L12/771 ,  H04L29/14

CPC分类号： H04L69/40

摘要： Distribution processing control unit determines a main processing range and a sub-processing range whose charges are taken by a cluster member to which the unit belongs. Among packets multicast to a cluster system, a filter hands over packets matching with the main processing range and the sub-processing range to a session processing unit. The session processing unit conducts session processing (including processing of updating session information stored in a holding unit). Thereafter, when the packet matches with the main processing range, the session processing unit hands the packet over to a packet forwarding unit and when the packet matches with the sub-processing range, abandons the packet. When a cluster member in charge of main processing of a packet whose sub-processing is taken charge of by the cluster member in question develops a failure, a failure recovery unit changes the sub-processing range to the main processing range.

摘要翻译： 分发处理控制单元确定主要处理范围和由该单元所属的群集成员拍摄费用的子处理范围。 在组播到集群系统的分组中，过滤器将与主处理范围和子处理范围匹配的分组交给会话处理单元。 会话处理单元进行会话处理（包括更新存储在保持单元中的会话信息的更新处理）。 此后，当分组与主处理范围匹配时，会话处理单元将分组交给分组转发单元，并且当分组与子处理范围匹配时，放弃该分组。 负责主处理由该问题的集群成员进行了子处理的分组的集群成员发生故障时，故障恢复部将副处理范围变更为主处理范围。

公开(公告)号：US07751327B2

公开(公告)日：2010-07-06

申请号：US11063896

申请日：2005-02-24

申请人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

发明人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

IPC分类号： H04J1/16

CPC分类号： H04L67/1034 ,  H04L41/0893 ,  H04L45/00 ,  H04L45/24 ,  H04L45/28 ,  H04L67/02 ,  H04L67/1002 ,  H04L67/1023 ,  H04L67/142

摘要： Load balancing manager assigns to each cluster member a filter rule so as to divide traffic processing by a predetermined rule. According to the assigned rule, each cluster member obtains a packet multicast by a neighbor node, on a data link with the neighbor node. Each cluster member detects a session of the obtained packet to perform predetermined processing such as recording and updating of a state and application of a firewall packet filter.

摘要翻译： 负载均衡管理器为每个集群成员分配一个过滤规则，以便将流量处理除以预定的规则。 根据分配的规则，每个集群成员通过邻居节点在与邻居节点的数据链路上获取分组多播。 每个集群成员检测所获得的分组的会话以执行诸如记录和更新防火墙分组过滤器的状态和应用的预定处理。

公开(公告)号：US20070274307A1

公开(公告)日：2007-11-29

申请号：US11547758

申请日：2005-04-15

申请人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

发明人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

IPC分类号： H04L12/56

CPC分类号： H04L67/14 ,  H04L45/22 ,  H04L45/28 ,  H04L45/46 ,  H04L67/1002 ,  H04L67/142

摘要： Each of cluster members (1-1) constituting a cluster system which functions as a router includes a session processor (15) and session state synchronization unit (16). If the session state of a session to which a packet input via a spare processing packet filter (13) belongs is not held in a session state holding unit (18), the session processor (15) newly registers the session state. When receiving a transfer rejection notification containing a session identifier of an unauthorized packet from a paired current cluster member, the session state synchronization unit (16) deletes a session state represented by the session identifier from the session state holding unit. If a cluster member which performs spare processing in a certain partial range has failed, the session state of this cluster member can be restored on a new cluster member added instead of the faulty cluster member, without largely increasing the communication cost.

摘要翻译： 构成作为路由器的集群系统的集群成员（1〜1）中的每一个包括会话处理器（15）和会话状态同步单元（16）。 如果通过备用处理分组过滤器（13）输入的分组的会话的会话状态不被保持在会话状态保持单元（18）中，则会话处理器（15）新登记会话状态。 会话状态同步单元（16）从会话状态保持单元中删除由会话标识符表示的会话状态时，从配对的当前集群成员接收到包含未授权分组的会话标识符的转移拒绝通知时， 如果在某个局部范围内执行备用处理的集群成员发生故障，则可以在添加的新集群成员（而不是故障集群成员）上恢复此集群成员的会话状态，而不会大大增加通信成本。

公开(公告)号：US20050185646A1

公开(公告)日：2005-08-25

申请号：US11063896

申请日：2005-02-24

申请人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

发明人： Shuichi Karino ,  Masahiro Jibiki ,  Kazuya Suzuki

IPC分类号： H04L12/707 ,  H04L12/24 ,  H04L12/26 ,  H04L12/713 ,  H04L12/803 ,  H04L29/08

CPC分类号： H04L67/1034 ,  H04L41/0893 ,  H04L45/00 ,  H04L45/24 ,  H04L45/28 ,  H04L67/02 ,  H04L67/1002 ,  H04L67/1023 ,  H04L67/142

摘要： Load balancing manager assigns to each cluster member a filter rule so as to divide traffic processing by a predetermined rule. According to the assigned rule, each cluster member obtains a packet multicast by an neighbor node on a data link with the neighbor node. Each cluster member detects a session of the obtained packet to perform predetermined processing such as recording and updating of a state and application of a firewall packet filter.

摘要翻译： 负载均衡管理器为每个集群成员分配一个过滤规则，以便将流量处理除以预定的规则。 根据分配的规则，每个集群成员通过与邻居节点的数据链路上的邻居节点获得分组多播。 每个集群成员检测所获得的分组的会话以执行诸如记录和更新防火墙分组过滤器的状态和应用的预定处理。

公开(公告)号：US08555295B2

公开(公告)日：2013-10-08

申请号：US12307656

申请日：2007-07-04

申请人： Shuichi Karino ,  Masahiro Jibiki

发明人： Shuichi Karino ,  Masahiro Jibiki

IPC分类号： G06F9/54

CPC分类号： G06F11/2023 ,  G06F11/2038 ,  G06F11/2097 ,  H04L67/1002 ,  H04L69/32

摘要： A protocol process to a reception traffic is executed by cluster members of a current use system and a backup system. The backup system discards the reception traffic subjected to the protocol process and only the current use system transfers the reception traffic to an AP. The AP makes an application process redundant in an independent method. The cluster member in charge of the protocol process to the reception traffic is determined by using a data in a lower layer and the cluster member in charge of the application process is determined by using a data in a higher layer after the protocol process.

摘要翻译： 接收流量的协议处理由当前使用系统和备份系统的集群成员执行。 备份系统丢弃经过协议处理的接收流量，只有当前使用系统将接收流量传送到AP。 AP以独立方式使应用程序进程冗余。 通过使用下层的数据来确定负责对接收业务的协议处理的集群成员，并且通过在协议处理之后使用较高层中的数据来确定负责应用处理的集群成员。

公开(公告)号：US20090204981A1

公开(公告)日：2009-08-13

申请号：US12307656

申请日：2007-07-04

申请人： Shuichi Karino ,  Masahiro Jibiki

发明人： Shuichi Karino ,  Masahiro Jibiki

IPC分类号： G06F9/46

CPC分类号： G06F11/2023 ,  G06F11/2038 ,  G06F11/2097 ,  H04L67/1002 ,  H04L69/32

摘要： A protocol process to a reception traffic is executed by cluster members of a current use system and a backup system. The backup system discards the reception traffic subjected to the protocol process and only the current use system transfers the reception traffic to an AP. The AP makes an application process redundant in an independent method. The cluster member in charge of the protocol process to the reception traffic is determined by using a data in a lower layer and the cluster member in charge of the application process is determined by using a data in a higher layer after the protocol process.

摘要翻译： 接收流量的协议处理由当前使用系统和备份系统的集群成员执行。 备份系统丢弃经过协议处理的接收流量，只有当前使用系统将接收流量传送到AP。 AP以独立方式使应用程序进程冗余。 通过使用下层的数据来确定负责对接收业务的协议处理的集群成员，并且通过在协议处理之后使用较高层中的数据来确定负责应用处理的集群成员。

公开(公告)号：US08458338B2

公开(公告)日：2013-06-04

申请号：US12602545

申请日：2008-06-11

申请人： Shuichi Karino ,  Masahiro Jibiki

发明人： Shuichi Karino ,  Masahiro Jibiki

IPC分类号： G06F15/16

CPC分类号： H04L61/2517 ,  H04L29/12377 ,  H04L29/12462 ,  H04L61/255

摘要： In order to more efficiently use port resources, which are finite global address resources assigned to an address translation device, the address translation device holds a session-port assignment table showing a correspondence between an existing session and a local endpoint (port resource) in the address translation device, and a port assignment rule indicating port usage about assignable ports. An address translation unit translates address information of a packet received according to the correspondence between the existing session and the port resource shown in the session-port assignment table, and assigns the port according to the port usage indicated by the port assignment rule for a packet for opening a new session. An assignment rule update unit changes a ratio of the port usage in the port assignment rule while the correspondence between the existing session and the port resource in the session-port assignment table is not changed.

摘要翻译： 为了更有效地使用分配给地址转换设备的有限全局地址资源的端口资源，地址转换设备保存会话端口分配表，其显示现有会话和本地端点（端口资源）之间的对应关系 地址转换设备，以及指示可分配端口的端口使用的端口分配规则。 地址转换单元根据会话端口分配表中所示的现有会话与端口资源之间的对应关系，对接收到的分组的地址信息进行转换，并根据端口分配规则为分组指定的端口分配端口 开了一个新的会话。 分配规则更新单元改变端口分配规则中的端口使用率，而会话端口分配表中现有会话与端口资源之间的对应关系不改变。

公开(公告)号：US08004965B2

公开(公告)日：2011-08-23

申请号：US11576131

申请日：2005-08-31

申请人： Shuichi Karino ,  Masahiro Jibiki

发明人： Shuichi Karino ,  Masahiro Jibiki

IPC分类号： G01R31/08

CPC分类号： H04L12/40189 ,  H04L12/40032 ,  H04L45/00 ,  H04L45/583 ,  H04L49/1523

摘要： From a time point of last confirmation of operation of the working device 51 until a time point of next confirmation, the standby device 52 receives the same packet as that whose transfer processing is executed by the working device from the interface units 521-1˜521-n, processes the packet by the transfer unit 522 and holds the processed packet in the accumulation units 525-1˜525-n. The device monitors an operation state of the working device 51 by an advertisement transmitted by the working device 51 and upon reception of the advertisement, responsively abandons the packet held in the accumulation units 525-1˜525-n. When determining that the working device 51 stops by non-arrival of an advertisement for a predetermined time period, the device sends out the packet held in the accumulation units 525-1˜525-n and switches processing so as to itself operate as a working device.

摘要翻译： 从最后确认工作装置51的时间点到下次确认的时间点为止，备用装置52从接口单元521-1〜521接收与工作装置执行的传送处理相同的分组 -n，由传送单元522处理分组，并将处理的分组保存在累积单元525-1〜525-n中。 设备通过由工作设备51发送的广告以及在接收到广告来监视工作设备51的操作状态，响应地放弃在累积单元525-1〜525-n中保存的分组。 当确定工作设备51在预定时间段内未到达广告停止时，设备发送保存在累积单元525-1〜525-n中的分组，并且切换处理以便其自身作为工作 设备。

公开(公告)号：US20080008169A1

公开(公告)日：2008-01-10

申请号：US11576131

申请日：2005-08-31

申请人： Shuichi Karino ,  Masahiro Jibiki

发明人： Shuichi Karino ,  Masahiro Jibiki

IPC分类号： H04L12/56

CPC分类号： H04L12/40189 ,  H04L12/40032 ,  H04L45/00 ,  H04L45/583 ,  H04L49/1523

摘要： From a time point of last confirmation of operation of the working device 51 until a time point of next confirmation, the standby device 52 receives the same packet as that whose transfer processing is executed by the working device from the interface units 521-1˜521-n, processes the packet by the transfer unit 522 and holds the processed packet in the accumulation units 525-1˜525-n. The device monitors an operation state of the working device 51 by an advertisement transmitted by the working device 51 and upon reception of the advertisement, responsively abandons the packet held in the accumulation units 525-1˜525-n. When determining that the working device 51 stops by non-arrival of an advertisement for a predetermined time period, the device sends out the packet held in the accumulation units 525-1˜525-n and switches processing so as to itself operate as a working device.

摘要翻译： 从最后确认工作装置51的时间点到下次确认的时间点为止，备用装置52从接口单元521〜1〜521接收与工作装置执行的传送处理相同的分组 -n由传送单元522处理分组，并将处理的分组保存在累加单元525-1〜525-n中。 设备通过由工作设备51发送的广告以及在接收到广告来监视工作设备51的操作状态，响应地放弃在累积单元525-1〜525-n中保存的分组。 当确定工作设备51在预定时间段内未到达广告停止时，设备发送保存在累积单元525-1〜525-n中的分组，并切换处理，以便其自身作为工作 设备。