公开(公告)号：US12034700B2

公开(公告)日：2024-07-09

申请号：US16841962

申请日：2020-04-07

Applicant: VMware, Inc.

Inventor： Sushruth Gopal ,  Jayant Jain ,  Davide Celotto ,  Josh Swerdlow

IPC: H04L29/06 ,  G06F9/455 ,  H04L9/40

CPC classification number: H04L63/0263 ,  G06F9/45558 ,  H04L63/0236 ,  G06F2009/45587 ,  G06F2009/45595

Abstract: A method comprises: in response to detecting a new expression in a policy rule, updating a global version number to a new value; identifying a particular IP address that corresponds to an FQDN matching on the new expression; storing an entry comprising the particular IP address, the new expression, and an entry version number in a first data structure, the entry version number being assigned the new value; in response to detecting a new connection to a destination IP address: finding a matching entry in the first data structure corresponding to the destination IP address; determining whether the global version number matches the entry version number for the matching entry; and in response to determining that the global version number does not match the entry version number for the matching entry, sending update information to a slowpath process that associates an updated configuration information for the matching entry.