中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

8 records (took 0.015 seconds)

    TIERING TO GROUP AND ACCESS CONTROL CLOUD NATIVE SECURITY POLICIES
    2.
    发明公开
    TIERING TO GROUP AND ACCESS CONTROL CLOUD NATIVE SECURITY POLICIES 审中-公开

    公开(公告)号：US20230171291A1

    公开(公告)日：2023-06-01

    申请号：US17570354

    申请日：2022-01-06

    Applicant: VMware, Inc.

    Inventor： Abhishek Raut ,  Yang Ding ,  Kai Su ,  Donghai Han ,  Zhengsheng Zhou ,  Wenfeng Liu

    IPC: H04L9/40

    CPC classification number: H04L63/20

    Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for managing access to network security policies. One of the methods includes determining, for a policy access request i) received from a device and ii) that requests access to a network security policy that defines a rule for controlling network traffic, whether there is an entitlement for the network security policy, wherein the entitlement indicates one or more types of operations that a subset of user accounts can perform on the network security policy; in response to determining that there is an entitlement, determining, using a mapping for the entitlement that identifies the subset of user accounts that have access to the network security policy, whether a user account for the device is included in the subset of user accounts; and selectively allowing or denying the policy access request using the entitlement and a result of the determination.

    VIRTUAL NETWORK CUSTOM RESOURCE DEFINITION
    3.
    发明申请
    VIRTUAL NETWORK CUSTOM RESOURCE DEFINITION 有权

    公开(公告)号：US20210314190A1

    公开(公告)日：2021-10-07

    申请号：US16897715

    申请日：2020-06-10

    Applicant: VMware, Inc.

    Inventor： Danting Liu ,  Jianjun Shen ,  Kai Su ,  Qian Sun ,  Wenfeng Liu ,  Donghai Han

    IPC: H04L12/46 ,  G06F9/54 ,  G06F9/50 ,  H04L12/931 ,  H04L12/66 ,  G06F9/455

    Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

    Container-based network policy configuration in software-defined networking (SDN) environments
    5.
    发明授权
    Container-based network policy configuration in software-defined networking (SDN) environments 有权

    公开(公告)号：US10944691B1

    公开(公告)日：2021-03-09

    申请号：US16742917

    申请日：2020-01-15

    Applicant: VMware, Inc.

    Inventor： Abhishek Raut ,  Kai Su ,  Jianjun Shen ,  Salvatore Orlando ,  Tong Liu ,  Shih-Hao Li

    IPC: H04L12/26 ,  H04L12/911

    Abstract: Example methods and systems for container-based network policy configuration in a software-defined networking (SDN) environment are disclosed. One example method may comprise: in response to detecting a first request to assign a container-based resource with a first label via a container orchestration system, assigning a logical network element associated with the container-based resource with a second label. The example method may also comprise: in response to detecting a second request to configure a container-based network policy associated with the container-based resource via the container orchestration system, identifying the logical network element by mapping the first label to the second label; and configuring the container-based network policy to be applicable to network traffic that is forwarded via the logical network element.

    Virtual network custom resource definition
    6.
    发明授权
    Virtual network custom resource definition 有权

    公开(公告)号：US11500688B2

    公开(公告)日：2022-11-15

    申请号：US16897715

    申请日：2020-06-10

    Applicant: VMware, Inc.

    Inventor： Danting Liu ,  Jianjun Shen ,  Kai Su ,  Qian Sun ,  Wenfeng Liu ,  Donghai Han

    IPC: G06F9/50 ,  H04L49/00 ,  H04L45/42 ,  G06F9/455 ,  G06F9/54 ,  H04L9/40 ,  H04L61/103 ,  H04L41/0893 ,  H04L41/18 ,  H04L41/5041 ,  H04L41/50 ,  H04L67/10 ,  H04L12/46 ,  H04L12/66 ,  H04L61/50 ,  H04L67/1001

    Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

    AUTO DEPLOYING NETWORK FOR VIRTUAL PRIVATE CLOUD WITH HETEROGENOUS WORKLOADS
    7.
    发明申请
    AUTO DEPLOYING NETWORK FOR VIRTUAL PRIVATE CLOUD WITH HETEROGENOUS WORKLOADS 有权

    公开(公告)号：US20210314239A1

    公开(公告)日：2021-10-07

    申请号：US16897652

    申请日：2020-06-10

    Applicant: VMware, Inc.

    Inventor： Jianjun Shen ,  Kai Su ,  Danting Liu ,  Yang Liu

    IPC: H04L12/24 ,  H04L29/08 ,  G06F9/54 ,  H04L29/06 ,  G06F9/455

    Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

    DEFINING SERVICES FOR VIRTUAL INTERFACES OF WORKLOADS
    8.
    发明申请
    DEFINING SERVICES FOR VIRTUAL INTERFACES OF WORKLOADS 有权

    公开(公告)号：US20210311803A1

    公开(公告)日：2021-10-07

    申请号：US16897666

    申请日：2020-06-10

    Applicant: VMware, Inc.

    Inventor： Zhengsheng Zhou ,  Kai Su ,  Jackie Lan ,  Danting Liu ,  Qian Sun ,  Donghai Han

    IPC: G06F9/50 ,  H04L12/931 ,  H04L12/717 ,  H04L29/06 ,  G06F9/455 ,  G06F9/54

    Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

Patent Agency Ranking