专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10749736B2 Network operating system for managing and securing networks 有权
公开(公告)号：US10749736B2
公开(公告)日：2020-08-18
申请号：US15838317
申请日：2017-12-11
申请人： Nicira, Inc.
发明人： Martin Casado , Keith E. Amidon , Peter J. Balland, III , Natasha Gude , Justin Pettit , Benjamin L. Pfaff , Scott J. Shenker , Daniel J. Wendlandt
IPC分类号： H04L12/24 , H04L12/26
摘要： Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

2. 发明授权

US10530711B2 Extensible virtual switch datapath 有权
公开(公告)号：US10530711B2
公开(公告)日：2020-01-07
申请号：US15808161
申请日：2017-11-09
申请人： Nicira, Inc.
发明人： Cheng-Chun Yu , Jonathan Stringer , Justin Pettit
IPC分类号： G06F9/455 , H04L12/26 , H04L12/931 , H04L29/06
摘要： Certain embodiments described herein are generally directed to configuring an extended Berkeley Packet Filter (eBPF) fast path. In some embodiments, a fixed-length array of actions is generated and loaded into the eBPF fast path, where each element of the array indicates a type of action for execution on a packet received by the eBPF fast path. In some embodiments, the eBPF fast path is loaded with a number of eBPF programs, each configured to execute a different type of action.

3. 发明授权

US10305725B2 Local controller agent for converting logical pipeline data 有权
公开(公告)号：US10305725B2
公开(公告)日：2019-05-28
申请号：US14944515
申请日：2015-11-18
申请人： Nicira, Inc.
发明人： Benjamin L. Pfaff , Justin Pettit
IPC分类号： H04L12/24 , G06F17/30 , H04L12/931 , H04L12/721 , H04L12/771 , H04L12/713 , H04L12/46 , H04L29/08
摘要： Some embodiments provide a method for a controller agent operating in a physical machine alongside a managed forwarding element (MFE) that implements several logical networks. The method receives a first set of flow entries describing a particular logical network. The flow entries of the first set have a first format. The method receives a set of physical network description data and binding data that binds logical network entities to the physical network. Based on the received flow entries, physical network description data, and binding data, the method generates a second set of flow entries for implementing the particular logical network in the physical network. The flow entries of the second set have a second format readable by the MFE. The method distributes the second set of flow entries to the MFE.

4. 发明授权

US10158538B2 Reporting elephant flows to a network controller 有权
公开(公告)号：US10158538B2
公开(公告)日：2018-12-18
申请号：US14231654
申请日：2014-03-31
申请人： Nicira, Inc.
发明人： Justin Pettit , Martin Casado , Teemu Koponen , Bruce Davie , W. Andrew Lambeth
IPC分类号： H04L12/801 , H04L12/26 , H04L12/803 , H04L12/947 , H04L12/935
摘要： Some embodiments provide a system that detects whether a flow is an elephant flow; and if so, the system treats it differently than a mouse flow. The system of some embodiment detect elephants based on one or more of the following: statistics associated with a flow, packet segment size, and invoked system calls. Also, some embodiments use one or more various methods to handle elephant flows. Examples of such methods include marking each packet belonging to an elephant with a particular marking, breaking the elephants into mice, reporting the elephant to a network controller, and selectively choosing a route for each packet belonging to the elephant.

5. 发明申请

US20180331961A1 INSPECTING OPERATIONS OF A MACHINE TO DETECT ELEPHANT FLOWS 审中-公开
公开(公告)号：US20180331961A1
公开(公告)日：2018-11-15
申请号：US15972232
申请日：2018-05-07
申请人： Nicira, Inc.
发明人： W. Andrew Lambeth , Amit Vasant Patil , Prasad Sharad Dabak , Laxmikant Vithal Gunda , Vasantha Kumar Dhanasekar , Justin Pettit
IPC分类号： H04L12/851 , H04L12/26
CPC分类号： H04L47/2441 , H04L43/026
摘要： Some embodiments provide a system that detects whether a data flow is an elephant flow; and if so, the system treats it differently than a mouse flow. The system of some embodiments detects an elephant flow by examining, among other items, the operations of a machine. In detecting, the system identifies an initiation of a new data flow associated with the machine. The new data flow can be an outbound data flow or an inbound data flow. The system then determines, based on the amount of data being sent or received, if the data flow is an elephant flow. The system of some embodiments identifies the initiation of a new data flow by intercepting a socket call or request to transfer a file.

6. 发明授权

US09967199B2 Inspecting operations of a machine to detect elephant flows 有权
公开(公告)号：US09967199B2
公开(公告)日：2018-05-08
申请号：US14502102
申请日：2014-09-30
申请人： Nicira, Inc.
发明人： W. Andrew Lambeth , Amit Vasant Patil , Prasad Sharad Dabak , Laxmikant Vithal Gunda , Vasantha Kumar Dhanasekar , Justin Pettit
IPC分类号： G06F15/173 , H04L12/851 , H04L12/26
CPC分类号： H04L47/2441 , H04L43/026
摘要： Some embodiments provide a system that detects whether a data flow is an elephant flow; and if so, the system treats it differently than a mouse flow. The system of some embodiments detects an elephant flow by examining, among other items, the operations of a machine. In detecting, the system identifies an initiation of a new data flow associated with the machine. The new data flow can be an outbound data flow or an inbound data flow. The system then determines, based on the amount of data being sent or received, if the data flow is an elephant flow. The system of some embodiments identifies the initiation of a new data flow by intercepting a socket call or request to transfer a file.

7. 发明授权

US09876672B2 Network operating system for managing and securing networks 有权
公开(公告)号：US09876672B2
公开(公告)日：2018-01-23
申请号：US14746816
申请日：2015-06-22
申请人： Nicira, Inc.
发明人： Martin Casado , Keith E. Amidon , Peter J. Balland, III , Natasha Gude , Justin Pettit , Benjamin Levy Pfaff , Scott J Shenker , Daniel J Wendlandt
IPC分类号： H04L12/24 , H04L29/08 , H04L12/26
CPC分类号： H04L41/06 , H04L41/0213 , H04L41/0809 , H04L41/082 , H04L41/0853 , H04L41/0859 , H04L41/0893 , H04L41/12 , H04L43/0817
摘要： Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

8. 发明申请

US20170163570A1 METHOD AND APPARATUS FOR IMPLEMENTING AND MANAGING VIRTUAL SWITCHES 审中-公开
公开(公告)号：US20170163570A1
公开(公告)日：2017-06-08
申请号：US15441205
申请日：2017-02-23
申请人： Nicira, Inc.
发明人： Martin Casado , Paul Ingram , Keith E. Amidon , Peter J. Balland, III , Teemu Koponen , Benjamin L. Pfaff , Justin Pettit , Jesse E. Gross, IV , Daniel J. Wendlandt
IPC分类号： H04L12/947 , H04L12/933 , G06F9/455 , H04L12/46 , H04L29/12 , H04L12/741 , H04L12/931 , H04L12/721
CPC分类号： H04L49/25 , G06F9/45558 , G06F2009/45595 , H04L12/4633 , H04L12/4641 , H04L41/0893 , H04L41/0896 , H04L41/12 , H04L45/54 , H04L45/66 , H04L49/00 , H04L49/15 , H04L49/70 , H04L61/256
摘要： In general, the present invention relates to a virtual platform in which one or more distributed virtual switches can be created for use in virtual networking. According to some aspects, the distributed virtual switch according to the invention provides the ability for virtual and physical machines to more readily, securely, and efficiently communicate with each other even if they are not located on the same physical host and/or in the same subnet or VLAN. According other aspects, the distributed virtual switches of the invention can support integration with traditional IP networks and support sophisticated IP technologies including NAT functionality, stateful firewalling, and notifying the IP network of workload migration. According to further aspects, the virtual platform of the invention creates one or more distributed virtual switches which may be allocated to a tenant, application, or other entity requiring isolation and/or independent configuration state. According to still further aspects, the virtual platform of the invention manages and/or uses VLAN or tunnels (e.g., GRE) to create a distributed virtual switch for a network while working with existing switches and routers in the network. The present invention finds utility in both enterprise networks, datacenters and other facilities.

9. 发明申请

US20160013969A1 NETWORK OPERATING SYSTEM FOR MANAGING AND SECURING NETWORKS 审中-公开
标题翻译：用于管理和保护网络的网络操作系统
公开(公告)号：US20160013969A1
公开(公告)日：2016-01-14
申请号：US14746816
申请日：2015-06-22
申请人： Nicira, Inc.
发明人： Martin Casado , Keith E. Amidon , Peter J. Balland, III , Natasha Gude , Justin Pettit , Benjamin Levy Pfaff , Scott J. Shenker , Daniel J. Wendlandt
IPC分类号： H04L12/24
CPC分类号： H04L41/06 , H04L41/0213 , H04L41/0809 , H04L41/082 , H04L41/0853 , H04L41/0859 , H04L41/0893 , H04L41/12 , H04L43/0817
摘要： Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.
摘要翻译：描述用于管理网络的系统和方法。维持网络当前状态的视图，其中网络的当前状态表征网络拓扑和网络成分，包括驻留在网络中或网络上的网络实体和网络元素。公布对应于网络状态的变化的事件，并且可以相应地配置一个或多个网络元件。描述了用于管理网络流量的方法，其确保网元采取的转发和其他动作实现全球声明的网络策略，并且独立于网络拓扑和网络组成部分的位置来参考高级别名称。描述了用于发现网络组件的方法，由此被自动配置。可以使用ACL执行路由，并且可以拦截数据包以允许主机在睡眠模式下继续。这些方法适用于虚拟环境。

10. 发明申请

US20150281098A1 Flow Cache Hierarchy 有权
标题翻译：流缓存层次结构
公开(公告)号：US20150281098A1
公开(公告)日：2015-10-01
申请号：US14574332
申请日：2014-12-17
申请人： Nicira, Inc.
发明人： Justin Pettit , Teemu Koponen , Andy Zhou , Benjamin L. Pfaff
IPC分类号： H04L12/851 , H04L12/713 , H04L12/721
CPC分类号： H04L47/2441 , G06F12/0811 , G06F12/128 , G06F2212/283 , G06F2212/69 , G06F2212/70 , H04L45/02 , H04L45/38 , H04L45/64 , H04L45/745 , H04L47/827 , H04L49/9042
摘要： Some embodiments provide a managed forwarding element (MFE that includes a set of flow tables including a first set of flow entries for processing packets received by the MFE. The MFE includes an aggregate cache including a second set of flow entries for processing packets received by the MFE. Each of the flow entries of the second set is for processing packets of multiple data flows. At least a subset of packet header fields of the packets of the multiple data flows have a same set of packet header field values, and a same set of operations is applied to said packets. The MFE includes an exact-match cache including a third set of flow entries for processing packets received by the MFE. Each of the flow entries of the third set is for processing packets for a single data flow having a unique set of packet header field values.
摘要翻译：一些实施例提供了一种管理转发元件（MFE，其包括一组流表，其包括用于处理由MFE接收的分组的第一组流条目，MFE包括聚合高速缓存，包括第二组流条目，用于处理由 MFE。第二组的每个流条目用于处理多个数据流的分组，多个数据流的分组的分组报头字段的至少一个子集具有相同的分组报头字段值集合，并且相同的集合所述MFE包括精确匹配高速缓存，其包括用于处理由MFE接收的分组的第三组流条目，第三组的每个流条目用于处理单个数据流的分组，所述单个数据流具有一组唯一的包头字段值。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式