公开(公告)号：US11252018B2

公开(公告)日：2022-02-15

申请号：US17004127

申请日：2020-08-27

Applicant: VMWARE, INC.

Inventor： Kantesh Mundaragi ,  Rahul Mishra ,  Pierluigi Rolando ,  Srinivas Ramaswamy ,  Yuxiao Zhang ,  Raju Koganty

IPC: H04L12/707 ,  H04L12/715 ,  H04L12/931 ,  H04L12/24 ,  H04L12/771 ,  H04L12/26

Abstract: Example methods and systems for failure handling for service chaining with service path monitoring. One example may comprise a first computer system detecting a data packet that is being forwarded along a first service path. The first computer system may configure a liveness check query and send the liveness check query along with the data packet towards a service virtualized computing instance to cause a liveness check response. In response to detecting the liveness check response from the service virtualized computing instance, the first computer system may determine that the service virtualized computing instance is available. Otherwise, report information may be generated and sent to trigger a switch from the first service path to a second service path that excludes the service virtualized computing instance.

公开(公告)号：US20230014706A1

公开(公告)日：2023-01-19

申请号：US17374611

申请日：2021-07-13

Applicant: VMware, Inc.

Inventor： Sirisha Myneni ,  Nafisa Mandliwala ,  Robin Manhas ,  Srinivas Ramaswamy

IPC: H04L29/06

Abstract: Some embodiments of the invention provide a method of implementing an intent-based intrusion detection and prevention system in a datacenter that includes at least one host computer executing multiple machines. The method forwards multiple contextual attributes to a set of servers that distribute intrusion detection scripts. The method receives, from the set of servers, a set of one or more intrusion detection scripts to be enforced on the at least one host computer, the set of one or more intrusion detection scripts defined based on the multiple forwarded contextual attributes. The method uses the multiple contextual attributes to identify and resolve at least one intrusion detection script in the set of one or more intrusion detection scripts.