专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20180069946A1 CACHE MANAGEMENT BASED ON FACTORS RELATING TO REPLACEMENT COST OF DATA 审中-公开
公开(公告)号：US20180069946A1
公开(公告)日：2018-03-08
申请号：US15811597
申请日：2017-11-13
申请人： Fortinet, Inc.
发明人： Sergey Katsev
IPC分类号： H04L29/08
CPC分类号： H04L67/2852 , G06F12/0813 , G06F12/126 , G06F2212/1024 , G06F2212/154 , H04L67/02
摘要： Systems and methods for a cache replacement policy that takes into consideration factors relating to the replacement cost of currently cached data and/or the replacement cost of received data. According to one embodiment, data is received by a network device responsive to a request issued on behalf of a client device. A cache management system running on the network device estimates, for each of multiple cache entries of a cache managed by the cache management system, a computational cost of reproducing data cached within each of the cache entries by respective origin storage devices from which the respective cached data originated. The cache management system estimates a communication latency between the cache and the respective origin storage devices. The cache management system enables the cache to replace data cached within a selected cache entry with the received data based on the estimated computational costs and the estimated communication latencies.

2. 发明申请

US20160036943A1 DNS-ENABLED COMMUNICATION BETWEEN HETEROGENEOUS DEVICES 有权
标题翻译：异构设备之间的DNS启用通信
公开(公告)号：US20160036943A1
公开(公告)日：2016-02-04
申请号：US14451106
申请日：2014-08-04
申请人： Fortinet, Inc.
发明人： William A. Kish , Sergey Katsev
IPC分类号： H04L29/06 , H04L29/12 , G06F17/30
CPC分类号： H04L61/6013 , H04L61/1511 , H04L61/6059 , H04L61/6086
摘要： Methods and systems for an IPv4-IPv6 proxy mode for DNS servers are provided. According to one embodiment, a DNS query is received by a network device from a dual-stack client. A determination is made the network device whether a first record type containing an Internet Protocol (IP) address for a server associated with the query exists within a DNS database of the network device. If the first record type exists for the server, then communication is enabled between the client and the server based on the first record type; otherwise it is automatically determined whether a second record type usable by the client exists for the server. Responsive to a determination that the second record type exists, data associated with the second record type is shared with the client by the network device to enable communication between the client and the server.
摘要翻译：提供了DNS服务器IPv4-IPv6代理模式的方法和系统。根据一个实施例，网络设备从双栈客户端接收DNS查询。确定网络设备是否包含与该查询相关联的服务器的因特网协议（IP）地址的第一记录类型存在于网络设备的DNS数据库内。如果服务器存在第一种记录类型，则基于第一种记录类型在客户机和服务器之间启用通信; 否则自动确定客户端是否存在可供服务器使用的第二种记录类型。响应于存在第二记录类型的确定，与第二记录类型相关联的数据由网络设备与客户端共享，以实现客户端与服务器之间的通信。

3. 发明授权

US10673815B2 DNS-enabled communication between heterogeneous devices 审中-公开
公开(公告)号：US10673815B2
公开(公告)日：2020-06-02
申请号：US15894830
申请日：2018-02-12
申请人： Fortinet, Inc.
发明人： William A Kish , Sergey Katsev
IPC分类号： G06F15/16 , H04L29/12
摘要： Methods and systems for an IPv4-IPv6 proxy mode for DNS servers are provided. According to one embodiment, a DNS query is received by a network device from a dual-stack client. A determination is made the network device whether a first record type containing an Internet Protocol (IP) address for a server associated with the query exists within a DNS database of the network device. If the first record type exists for the server, then communication is enabled between the client and the server based on the first record type; otherwise it is automatically determined whether a second record type usable by the client exists for the server. Responsive to a determination that the second record type exists, data associated with the second record type is shared with the client by the network device to enable communication between the client and the server.

4. 发明授权

US10171492B2 Denial-of-service (DoS) mitigation based on health of protected network device 有权
公开(公告)号：US10171492B2
公开(公告)日：2019-01-01
申请号：US15192575
申请日：2016-06-24
申请人： Fortinet, Inc.
发明人： William A. Kish , Sergey Katsev
IPC分类号： H04L29/06
摘要： Systems and methods for improving the performance of DDoS mitigation by monitoring the health of a protected network resource are provided. According to one embodiment, health of a network device protected by DoS mitigation device can be evaluated and packet/traffic received on the DoS mitigation device can be selectively/conditionally forwarded to the protected network device or can be dropped based on the health of the protected network device. According to one embodiment, at-least a part of the traffic is blocked when the health of the protected network device is below a predetermined health threshold. In an exemplary implementation, a measure of volume of traffic originated by different computing devices and handled by the protected network device can be computed, and packet filtering or conditional forwarding can be enabled when the computed measure of volume of traffic exceeds a predetermined traffic volume threshold.

5. 发明授权

US10148785B2 Cache management based on factors relating to replacement cost of data 有权
公开(公告)号：US10148785B2
公开(公告)日：2018-12-04
申请号：US15811597
申请日：2017-11-13
申请人： Fortinet, Inc.
发明人： Sergey Katsev
IPC分类号： H04L29/08 , G06F12/0813 , G06F12/126
摘要： Systems and methods for a cache replacement policy that takes into consideration factors relating to the replacement cost of currently cached data and/or the replacement cost of received data. According to one embodiment, data is received by a network device responsive to a request issued on behalf of a client device. A cache management system running on the network device estimates, for each of multiple cache entries of a cache managed by the cache management system, a computational cost of reproducing data cached within each of the cache entries by respective origin storage devices from which the respective cached data originated. The cache management system estimates a communication latency between the cache and the respective origin storage devices. The cache management system enables the cache to replace data cached within a selected cache entry with the received data based on the estimated computational costs and the estimated communication latencies.

6. 发明授权

US10992641B2 DNS-enabled communication between heterogeneous devices 有权
公开(公告)号：US10992641B2
公开(公告)日：2021-04-27
申请号：US16579521
申请日：2019-09-23
申请人： Fortinet, Inc.
发明人： William A Kish , Sergey Katsev
IPC分类号： G06F15/16 , H04L29/12
摘要： Methods and systems for an IPv4-IPv6 proxy mode for DNS servers are provided. According to one embodiment, a DNS query is received by a network device from a dual-stack client. A determination is made the network device whether a first record type containing an Internet Protocol (IP) address for a server associated with the query exists within a DNS database of the network device. If the first record type exists for the server, then communication is enabled between the client and the server based on the first record type; otherwise it is automatically determined whether a second record type usable by the client exists for the server. Responsive to a determination that the second record type exists, data associated with the second record type is shared with the client by the network device to enable communication between the client and the server.

7. 发明授权

US10560543B2 Rule based cache processing in application delivery controller for load balancing 有权
公开(公告)号：US10560543B2
公开(公告)日：2020-02-11
申请号：US14669367
申请日：2015-03-26
申请人： Fortinet, Inc
发明人： Sergey Katsev
IPC分类号： H04L29/08
摘要： Methods and systems for improving performance of an HTTP cache are provided. According to one embodiment, an HTTP request is received by an ADC for a resource associated with a server on behalf of which the ADC is performing load balancing. The ADC determines based on a local HTTP cache whether it can service the request. The request is parsed to identify a header. The existence or non-existence of locally cached content matching the request is identified by comparing portions of the identified header with corresponding portions of header information of cached content based on a vary rule defining when two headers are meaningfully different. Therefore, the identified header need not exactly match an entirety of the cached information for a cache hit to be found. Responsive to a cache hit, the ADC responds to the request with an HTTP response containing the identified locally cached content.

8. 发明授权

US09894033B2 DNS-enabled communication between heterogeneous devices 有权
公开(公告)号：US09894033B2
公开(公告)日：2018-02-13
申请号：US14451106
申请日：2014-08-04
申请人： Fortinet, Inc.
发明人： William A Kish , Sergey Katsev
IPC分类号： G06F15/16 , H04L29/12
CPC分类号： H04L61/6013 , H04L61/1511 , H04L61/6059 , H04L61/6086
摘要： Methods and systems for an IPv4-IPv6 proxy mode for DNS servers are provided. According to one embodiment, a DNS query is received by a network device from a dual-stack client. A determination is made the network device whether a first record type containing an Internet Protocol (IP) address for a server associated with the query exists within a DNS database of the network device. If the first record type exists for the server, then communication is enabled between the client and the server based on the first record type; otherwise it is automatically determined whether a second record type usable by the client exists for the server. Responsive to a determination that the second record type exists, data associated with the second record type is shared with the client by the network device to enable communication between the client and the server.

9. 发明申请

US20170374098A1 DENIAL-OF-SERVICE (DOS) MITIGATION APPROACH BASED ON CONNECTION CHARACTERISTICS 审中-公开
公开(公告)号：US20170374098A1
公开(公告)日：2017-12-28
申请号：US15192604
申请日：2016-06-24
申请人： Fortinet, Inc.
发明人： William A. Kish , Sergey Katsev
IPC分类号： H04L29/06 , H04L12/26 , H04L29/08
CPC分类号： H04L63/1458 , H04L43/0876 , H04L43/16 , H04L63/1425 , H04L67/02
摘要： Systems and methods for an improved DDoS mitigation approach are provided. According to one embodiment, a current threshold for a network connection characteristic is established within a Denial-of-Service (DoS) mitigation device logically interposed between a protected resource of a private network and multiple client devices residing external to the private network. A number of connections between the client devices and the protected network resource are tracked. During a period of time in which the number of connections exceeds a connection count threshold: (i) for each of the connections, a measured value for the network connection characteristic is compared to the current threshold; (ii) responsive to a determination that the measured value exceeds the current threshold, the connection is dropped; and (iii) the current threshold is periodically reduced, such that only those connections complying with the current threshold are maintained.

10. 发明申请

US20160285992A1 RULE BASED CACHE PROCESSING IN APPLICATION DELIVERY CONTROLLER FOR LOAD BALANCING 审中-公开
标题翻译：用于负载均衡的应用交付控制器中基于规则的缓存处理
公开(公告)号：US20160285992A1
公开(公告)日：2016-09-29
申请号：US14669367
申请日：2015-03-26
申请人： Fortinet, Inc.
发明人： Sergey Katsev
IPC分类号： H04L29/08 , H04L29/06
摘要： Methods and systems for improving performance of an HTTP cache are provided. According to one embodiment, an HTTP request is received by an ADC for a resource associated with a server on behalf of which the ADC is performing load balancing. The ADC determines based on a local HTTP cache whether it can service the request. The request is parsed to identify a header. The existence or non-existence of locally cached content matching the request is identified by comparing portions of the identified header with corresponding portions of header information of cached content based on a vary rule defining when two headers are meaningfully different. Therefore, the identified header need not exactly match an entirety of the cached information for a cache hit to be found. Responsive to a cache hit, the ADC responds to the request with an HTTP response containing the identified locally cached content.
摘要翻译：提供了用于提高HTTP缓存性能的方法和系统。根据一个实施例，ADC接收与代表ADC正在执行负载平衡的服务器相关联的资源的HTTP请求。 ADC根据本地HTTP缓存确定是否可以为请求提供服务。该请求被解析为标识头。基于定义两个头部有意义地不同的变化规则，将识别的标题的部分与缓存的内容的标题信息的相应部分进行比较来识别存在或不存在与请求匹配的本地高速缓存的内容。因此，所标识的头部不需要与要发现的缓存命中的缓存信息的整体完全匹配。响应于缓存命中，ADC通过包含所识别的本地缓存内容的HTTP响应响应请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式