专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09270639B2 Load balancing among a cluster of firewall security devices 有权
标题翻译：一组防火墙安全设备之间的负载平衡
公开(公告)号：US09270639B2
公开(公告)日：2016-02-23
申请号：US14142560
申请日：2013-12-27
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/803 , H04L12/741 , H04L29/08
CPC分类号： H04L63/0218 , H04L45/74 , H04L47/125 , H04L63/0227 , H04L67/1002
摘要： A method for balancing load among firewall security devices in a network is disclosed. Firewall security devices are arranged in multiple clusters. A switching device is configured with the firewall security devices by communicating control messages and heartbeat signals. Information regarding the configured firewall security devices is then included in a load balancing table. A load balancing function is configured for enabling the distribution of data traffic received by the switching device. A received data packet by the switching device is forwarded to one of the firewall security devices in a cluster based on the load balancing function, the load balancing table and the address contained in the data packet.
摘要翻译：公开了一种用于平衡网络中的防火墙安全设备之间的负载的方法。防火墙安全设备安排在多个集群中。交换设备通过传送控制消息和心跳信号来配置防火墙安全设备。有关配置的防火墙安全设备的信息随后被包含在负载平衡表中。配置负载均衡功能，用于启用交换设备接收的数据流量的分配。基于负载平衡功能，负载均衡表和数据包中包含的地址，由交换设备接收的数据包转发到群集中的一个防火墙安全设备。

2. 发明申请

US20150326533A1 LOAD BALANCING AMONG A CLUSTER OF FIREWALL SECURITY DEVICES 审中-公开
标题翻译：安全防护装置集群中的负载平衡
公开(公告)号：US20150326533A1
公开(公告)日：2015-11-12
申请号：US14804093
申请日：2015-07-20
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/741 , H04L29/08 , H04L12/803
CPC分类号： H04L63/0218 , H04L45/74 , H04L47/125 , H04L63/0227 , H04L67/1002
摘要： A method for balancing load among firewall security devices in a network is disclosed. According to one embodiment, a switch causes firewall security devices (FSDs) of a cluster to enter into a load balancing mode. Responsive to receiving a heartbeat signal from an FSD, information regarding the FSD and the port on which the heartbeat signal was received are added to a table maintained by the switch that maps outputs of a load balancing function to ports of the switch. A received packet is forwarded to an FSD of the cluster by: (i) extracting a configurable number of bit values from a configurable set of bit positions within the packet; (ii) determining the output of the load balancing function; (iii) identifying the port to which the FSD is coupled based on the output and the table; and (iv) transmitting the packet to the FSD via the identified port.
摘要翻译：公开了一种用于平衡网络中的防火墙安全设备之间的负载的方法。根据一个实施例，交换机使得集群的防火墙安全设备（FSD）进入负载平衡模式。响应于从FSD接收到心跳信号，关于FSD和接收到心跳信号的端口的信息被添加到由将负载均衡功能的输出映射到交换机的端口的交换机维护的表中。通过以下方式将接收的分组转发到群集的FSD：（i）从分组内的可配置的比特位置集中提取可配置数量的比特值; （ii）确定负载平衡功能的输出; （iii）根据输出和表格识别FSD所耦合的端口; 和（iv）通过识别的端口将数据包发送到FSD。

3. 发明申请

US20160359806A1 LOAD BALANCING AMONG A CLUSTER OF FIREWALL SECURITY DEVICES 审中-公开
标题翻译：安全防护装置集群中的负载平衡
公开(公告)号：US20160359806A1
公开(公告)日：2016-12-08
申请号：US15232691
申请日：2016-08-09
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/741 , H04L12/803 , G06F17/30 , H04L29/08
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, imminent shutdown of a first cluster unit of an HA cluster of FSDs is gracefully handled by a switching device. A load balancing (LB) table, forming associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled, is maintained. The first cluster unit is coupled to a first port. Responsive to imminent shutdown of the first cluster unit: (i) a second cluster unit, coupled to a second port, is selected to perform security services on traffic sessions handled by the first cluster unit; and (ii) the LB table is updated by replacing reference(s) to the first port with reference(s) to the second port. Security services for subsequently received network traffic associated with the traffic sessions is performed by the second cluster unit.
摘要翻译：提供了一种在防火墙安全设备（FSD）之间平衡负载的方法。根据一个实施例，由开关设备适当地处理FSD的HA簇的第一簇单元的即将关闭。保持由LB功能输出的哈希值与簇单元所耦合的交换设备的相应端口之间形成关联的负载平衡（LB）表。第一集群单元耦合到第一端口。响应于即将关闭第一集群单元：（i）耦合到第二端口的第二集群单元被选择为在由第一集群单元处理的业务会话上执行安全服务; 和（ii）通过将引用替换为具有参考的第一端口到第二端口来更新LB表。随后接收的与流量会话相关联的网络流量的安全服务由第二集群单元执行。

4. 发明授权

US09288183B2 Load balancing among a cluster of firewall security devices 有权
标题翻译：一组防火墙安全设备之间的负载平衡
公开(公告)号：US09288183B2
公开(公告)日：2016-03-15
申请号：US14804093
申请日：2015-07-20
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/741 , H04L29/08 , H04L12/803
CPC分类号： H04L63/0218 , H04L45/74 , H04L47/125 , H04L63/0227 , H04L67/1002
摘要： A method for balancing load among firewall security devices in a network is disclosed. According to one embodiment, a switch causes firewall security devices (FSDs) of a cluster to enter into a load balancing mode. Responsive to receiving a heartbeat signal from an FSD, information regarding the FSD and the port on which the heartbeat signal was received are added to a table maintained by the switch that maps outputs of a load balancing function to ports of the switch. A received packet is forwarded to an FSD of the cluster by: (i) extracting a configurable number of bit values from a configurable set of bit positions within the packet; (ii) determining the output of the load balancing function; (iii) identifying the port to which the FSD is coupled based on the output and the table; and (iv) transmitting the packet to the FSD via the identified port.
摘要翻译：公开了一种用于平衡网络中的防火墙安全设备之间的负载的方法。根据一个实施例，交换机使得集群的防火墙安全设备（FSD）进入负载平衡模式。响应于从FSD接收到心跳信号，关于FSD和接收到心跳信号的端口的信息被添加到由将负载均衡功能的输出映射到交换机的端口的交换机维护的表中。通过以下方式将接收的分组转发到群集的FSD：（i）从分组内的可配置的比特位置集中提取可配置数量的比特值; （ii）确定负载平衡功能的输出; （iii）根据输出和表格识别FSD所耦合的端口; 和（iv）通过识别的端口将数据包发送到FSD。

5. 发明授权

US09853942B2 Load balancing among a cluster of firewall security devices 有权
公开(公告)号：US09853942B2
公开(公告)日：2017-12-26
申请号：US15232691
申请日：2016-08-09
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , G06F17/30 , H04L29/08 , H04L29/12 , H04L12/801 , H04L12/741 , H04L12/803 , H04L12/931 , H04L12/911
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, imminent shutdown of a first cluster unit of an HA cluster of FSDs is gracefully handled by a switching device. A load balancing (LB) table, forming associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled, is maintained. The first cluster unit is coupled to a first port. Responsive to imminent shutdown of the first cluster unit: (i) a second cluster unit, coupled to a second port, is selected to perform security services on traffic sessions handled by the first cluster unit; and (ii) the LB table is updated by replacing reference(s) to the first port with reference(s) to the second port. Security services for subsequently received network traffic associated with the traffic sessions is performed by the second cluster unit.

6. 发明授权

US09825912B2 Load balancing among a cluster of firewall security devices 有权
公开(公告)号：US09825912B2
公开(公告)日：2017-11-21
申请号：US15232742
申请日：2016-08-09
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , G06F17/30 , H04L29/08 , H04L29/12 , H04L12/801 , H04L12/741 , H04L12/803 , H04L12/931 , H04L12/911
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, a switching device performs adaptive load balancing among cluster units of an HA cluster of firewall security devices. A load balancing (LB) function implemented by the switching device is configured based on information received from a network administrator. A LB table is maintained that forms associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled. Network traffic received by the switching device is directed to appropriate cluster units based on the LB function and the LB table. A traffic load on each of the cluster units is monitored. Responsive to a deviation from a predefined ideal traffic distribution, an attempt is made to improve performance of the HA cluster by dynamically adjusting the LB balancing table to address the deviation.

7. 发明申请

US20160359808A1 LOAD BALANCING AMONG A CLUSTER OF FIREWALL SECURITY DEVICES 审中-公开
标题翻译：安全防护装置集群中的负载平衡
公开(公告)号：US20160359808A1
公开(公告)日：2016-12-08
申请号：US15232742
申请日：2016-08-09
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/803 , H04L12/741 , H04L29/08
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, a switching device performs adaptive load balancing among cluster units of an HA cluster of firewall security devices. A load balancing (LB) function implemented by the switching device is configured based on information received from a network administrator. A LB table is maintained that forms associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled. Network traffic received by the switching device is directed to appropriate cluster units based on the LB function and the LB table. A traffic load on each of the cluster units is monitored. Responsive to a deviation from a predefined ideal traffic distribution, an attempt is made to improve performance of the HA cluster by dynamically adjusting the LB balancing table to address the deviation.
摘要翻译：提供了一种在防火墙安全设备（FSD）之间平衡负载的方法。根据一个实施例，交换设备在防火墙安全设备的HA集群的集群单元之间执行自适应负载平衡。基于从网络管理员接收的信息，配置由交换设备实现的负载均衡（LB）功能。维护LB表，其形成由LB功能输出的哈希值与集群单元耦合到的交换设备的相应端口之间的关联。基于LB功能和LB表，由交换设备接收的网络流量定向到适当的集群单元。监视每个集群单元上的流量负载。响应于偏离预定义的理想流量分布，尝试通过动态调整LB平衡表来解决偏差来提高HA群集的性能。

8. 发明申请

US20160112325A1 LOAD BALANCING AMONG A CLUSTER OF FIREWALL SECURITY DEVICES 审中-公开
公开(公告)号：US20160112325A1
公开(公告)日：2016-04-21
申请号：US14979031
申请日：2015-12-22
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L12/803 , H04L29/06 , G06F17/30 , H04L29/08
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices in a network is disclosed. According to one embodiment, a switch causes firewall security devices (FSDs) of a cluster to enter into a load balancing mode. Responsive to receiving a heartbeat signal from an FSD, information regarding the FSD and the port on which the heartbeat signal was received are added to a table maintained by the switch that maps outputs of a load balancing function to ports of the switch. A received packet is forwarded to an FSD of the cluster by: (i) extracting a configurable number of bit values from a configurable set of bit positions within the packet; (ii) determining the output of the load balancing function; (iii) identifying the port to which the FSD is coupled based on the output and the table; and (iv) transmitting the packet to the FSD via the identified port.

9. 发明授权

US10084751B2 Load balancing among a cluster of firewall security devices 有权
公开(公告)号：US10084751B2
公开(公告)日：2018-09-25
申请号：US15817273
申请日：2017-11-19
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L12/931 , H04L29/08 , H04L29/12 , G06F17/30 , H04L12/911 , H04L12/801 , H04L12/803 , H04L12/741
CPC分类号： H04L63/0236 , G06F16/282 , G06F16/9017 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, a switching device performs adaptive load balancing among cluster units of an HA cluster of firewall security devices. A load balancing (LB) function implemented by the switching device is configured based on information received from a network administrator. A LB table is maintained that forms associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled. Network traffic received by the switching device is directed to appropriate cluster units based on the LB function and the LB table. A traffic load on each of the cluster units is monitored. Responsive to a deviation from a predefined ideal traffic distribution, an attempt is made to improve performance of the HA cluster by dynamically adjusting the LB balancing table to address the deviation.

10. 发明申请

US20180077118A1 LOAD BALANCING AMONG A CLUSTER OF FIREWALL SECURITY DEVICES 审中-公开
公开(公告)号：US20180077118A1
公开(公告)日：2018-03-15
申请号：US15817273
申请日：2017-11-19
申请人： Fortinet, Inc.
发明人： Edward Lopez , Joe Mihelich , Matthew F. Hepburn
IPC分类号： H04L29/06 , H04L29/08 , G06F17/30 , H04L29/12 , H04L12/931 , H04L12/911 , H04L12/801 , H04L12/803 , H04L12/741
CPC分类号： H04L63/0236 , G06F17/30589 , G06F17/30952 , H04L45/74 , H04L47/125 , H04L47/196 , H04L47/726 , H04L49/354 , H04L61/2007 , H04L63/02 , H04L63/0218 , H04L63/0227 , H04L63/0272 , H04L63/029 , H04L63/1408 , H04L63/1458 , H04L67/1002 , H04L67/1004 , H04L67/1027 , H04L67/142
摘要： A method for balancing load among firewall security devices (FSDs) is provided. According to one embodiment, a switching device performs adaptive load balancing among cluster units of an HA cluster of firewall security devices. A load balancing (LB) function implemented by the switching device is configured based on information received from a network administrator. A LB table is maintained that forms associations between hash values output by the LB function and corresponding ports of the switching device to which the cluster units are coupled. Network traffic received by the switching device is directed to appropriate cluster units based on the LB function and the LB table. A traffic load on each of the cluster units is monitored. Responsive to a deviation from a predefined ideal traffic distribution, an attempt is made to improve performance of the HA cluster by dynamically adjusting the LB balancing table to address the deviation.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式