会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 7. 发明申请
    • LONGEST PREFIX MATCH SEARCHES WITH VARIABLE NUMBERS OF PREFIXES
    • 最新的前缀匹配搜索与可变数字的前缀
    • US20130246651A1
    • 2013-09-19
    • US13418907
    • 2012-03-13
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F15/173
    • H04L45/748H04L45/7453
    • An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
    • 示例性网络设备包括控制平面和过滤器查找模块,其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。 过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。 控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度,其中前缀长度集合与一个应用相关联,基于所接收的一组前缀长度生成两个或多个组 其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目,并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程 。
    • 8. 发明授权
    • Longest prefix match searches with variable numbers of prefixes
    • 最长的前缀匹配用可变数量的前缀进行搜索
    • US08799507B2
    • 2014-08-05
    • US13418907
    • 2012-03-13
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F15/173
    • H04L45/748H04L45/7453
    • An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
    • 示例性网络设备包括控制平面和过滤器查找模块,其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。 过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。 控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度,其中前缀长度集合与一个应用相关联,基于所接收的一组前缀长度生成两个或多个组 其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目,并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程 。
    • 9. 发明授权
    • Hardware implementation of complex firewalls using chaining technique
    • 使用链接技术的复杂防火墙的硬件实现
    • US08800021B1
    • 2014-08-05
    • US13172621
    • 2011-06-29
    • Venkatasubramanian SwaminathanDeepak GoelJianhui HuangJohn KeenJean-Marc FrailongSrinivasan JagannadhanSrilakshmi Adusumalli
    • Venkatasubramanian SwaminathanDeepak GoelJianhui HuangJohn KeenJean-Marc FrailongSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F17/00
    • H04L63/0263H04L63/02H04L63/0209
    • A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.
    • 防火墙设备可以包括包括过滤器块的转发组件。 滤波器块可以获得第一硬件实现的滤波器,其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作,其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作,将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器,以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。 滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作,其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。