ALIAS DOMAINS FOR ACCESSING ZTNA APPLICATIONS

    公开(公告)号:US20240129277A1

    公开(公告)日:2024-04-18

    申请号:US18089997

    申请日:2022-12-28

    Applicant: Sophos Limited

    CPC classification number: H04L63/0281 H04L41/12 H04L67/1036

    Abstract: A cloud computing platform provides zero trust network access as a service to customers that maintain applications on-premises. In this context, the cloud computing platform may associate customers and/or applications with specific service proxies, and add an abstraction layer for network access that maps an alias domain for each customer and/or application to a network load balancer associated with the specific service proxies associated with the corresponding application(s). This approach advantageously simplifies the configuration of service proxies at the cloud computing platform by permitting dedicated relationships among network load balancers, specific service proxies, and specific applications, while concurrently reducing or avoiding the administrative burden on customers of updating network pointers when the clusters of service proxies are periodically reconfigured to adjust to varying user traffic.

    NAME RESOLUTION TRIGGERED MONITORING AGENT SELECTION

    公开(公告)号:US20240073177A1

    公开(公告)日:2024-02-29

    申请号:US17897745

    申请日:2022-08-29

    CPC classification number: H04L61/4511 H04L61/2514 H04L61/3015 H04L67/1036

    Abstract: Methods are provided to perform a name resolution triggered monitoring agent selection for full stack observability. The methods involve obtaining a name resolution request for an enterprise service to be accessed by an endpoint device. A plurality of service instances are configured to provide the enterprise service. The methods further involve determining, based on the name resolution request, a monitoring agent from a plurality of monitoring agents of a monitoring service that monitors performance of the enterprise service and selecting a service instance, from the plurality of service instances, that is associated with the monitoring agent in a name resolution record. The methods further involve providing, to the endpoint device, location information for accessing the service instance and provisioning the monitoring agent to monitor the performance of the enterprise service executed by the service instance for the endpoint device.

    ENABLING ANALYTICS FOR A VIRTUALIZED APPLICATION

    公开(公告)号:US20230344900A1

    公开(公告)日:2023-10-26

    申请号:US18342692

    申请日:2023-06-27

    Inventor: Kanakrai Chauhan

    Abstract: Solutions for enabling analytics for a virtualized application leverage reproducibility of information as a substitute for persisting information. Disclosed solutions include: collecting, by a virtualized application, first analytics data on a user equipment (UE); performing, by the virtualized application, a one-way function (e.g., a hash function) on persistent information (e.g., an international mobile equipment identity (IMEI) number) on the UE to generate a unique UE identification (ID); transmitting the first analytics data and the UE ID to a remote node across a network; collecting, by the virtualized application, second analytics data on the UE; and transmitting the second analytics data and the UE ID to the remote node across the network. Because the UE ID is deterministic, it may be generated repeatedly, as needed, (producing the same value each time) to compensate for the inability of the virtualized application to persist the UE ID on the UE.

    Dynamically Computing Load Balancer Subset Size in a Distributed Computing System

    公开(公告)号:US20230300190A1

    公开(公告)日:2023-09-21

    申请号:US18198575

    申请日:2023-05-17

    CPC classification number: H04L67/1036 H04L47/28 H04L67/01 H04L67/60

    Abstract: A distributed computing system uses dynamically calculates a subset size for each of a plurality of load balancers. Each of a plurality of load balancers logs requests from client devices for connections to back-end servers and periodically sends a request report to a traffic aggregator, which aggregates the report requests from the load balancers in the corresponding zone. Each traffic aggregator sends the aggregated request data to a traffic controller, which aggregates the request data to determine a total number of requests received at the system. The total request data is transmitted through each traffic aggregator to each load balancer instance, which calculates a percentage of the total number of requests produced by the load balancer and determines a subset size based on the calculated percentage.

    Enabling analytics for a virtualized application

    公开(公告)号:US11729262B2

    公开(公告)日:2023-08-15

    申请号:US17844621

    申请日:2022-06-20

    Inventor: Kanakrai Chauhan

    Abstract: Solutions for enabling analytics for a virtualized application leverage reproducibility of information as a substitute for persisting information. Disclosed solutions include: collecting, by a virtualized application, first analytics data on a user equipment (UE); performing, by the virtualized application, a one-way function (e.g., a hash function) on persistent information (e.g., an international mobile equipment identity (IMEI) number) on the UE to generate a unique UE identification (ID); transmitting the first analytics data and the UE ID to a remote node across a network; collecting, by the virtualized application, second analytics data on the UE; and transmitting the second analytics data and the UE ID to the remote node across the network. Because the UE ID is deterministic, it may be generated repeatedly, as needed, (producing the same value each time) to compensate for the inability of the virtualized application to persist the UE ID on the UE.

    User-plane path selection for the edge service

    公开(公告)号:US11671356B2

    公开(公告)日:2023-06-06

    申请号:US17482126

    申请日:2021-09-22

    Applicant: Apple Inc.

    Inventor: Yifan Yu

    Abstract: Techniques for a selection or reselection a user-plane path in a mobile network are disclosed herein. A user-plane gateway (GW-U) can be configured to decode a packet received from a control plane gateway (GW-C) in a packet data network gateway (PGW) to determine a forwarding policy. Additionally, the GW-U can decode, from an evolved node B (eNB), an internet protocol (IP) packet having a header field. Furthermore, the GW-U can determine a user-plane path for the IP packet based on a comparison of the header field and the forwarding policy. Based on the determined user-plane path, the GW-U can forward the IP packet to a local application server (AS), encapsulate and forward the IP packet to the PGW, or discard the IP packet. Moreover, the GW-U can encode the IP packet for transmission based on the determined user-plane selection.

    Endpoint security domain name server agent

    公开(公告)号:US11652792B2

    公开(公告)日:2023-05-16

    申请号:US16668861

    申请日:2019-10-30

    Abstract: A network is secured by managing domain name requests such that client devices are restricted from visiting malicious or undesirable domains. An endpoint Domain Name Server (DNS) agent is installed on client devices on a local network, and the endpoint DNS agents intercept DNS requests from the client devices and process the received DNS request in the endpoint DNS agent based on a security policy set for the client device via the endpoint DNS agent. In a further example processing the received DNS request comprises identifying the client device, end user, and the DNS request to a cloud-based DNS server, and processing a response received from the cloud-based DNS server received in response to the DNS request. The endpoint DNS agent is further operable to distinguish between DNS requests for local domains and remote domains, and to redirect DNS requests for local domains to a local network DNS server.

Patent Agency Ranking