会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 7. 发明申请
    • LONGEST PREFIX MATCH SEARCHES WITH VARIABLE NUMBERS OF PREFIXES
    • 最新的前缀匹配搜索与可变数字的前缀
    • US20130246651A1
    • 2013-09-19
    • US13418907
    • 2012-03-13
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F15/173
    • H04L45/748H04L45/7453
    • An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
    • 示例性网络设备包括控制平面和过滤器查找模块,其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。 过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。 控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度,其中前缀长度集合与一个应用相关联,基于所接收的一组前缀长度生成两个或多个组 其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目,并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程 。
    • 8. 发明授权
    • Longest prefix match searches with variable numbers of prefixes
    • 最长的前缀匹配用可变数量的前缀进行搜索
    • US08799507B2
    • 2014-08-05
    • US13418907
    • 2012-03-13
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • John KeenJean-Marc FrailongDeepak GoelSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F15/173
    • H04L45/748H04L45/7453
    • An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.
    • 示例性网络设备包括控制平面和过滤器查找模块,其包括支持最大数量的不同前缀长度的并行查找的布隆过滤器。 过滤器查找模块访问Bloom过滤器以确定与一组前缀中的条目匹配的最长长度前缀。 控制平面接收包括大于由Bloom过滤器支持的不同前缀长度的最大数量的前缀长度,其中前缀长度集合与一个应用相关联,基于所接收的一组前缀长度生成两个或多个组 其中不同前缀长度的两个或多个组中的每一个包括不超过不同前缀长度的最大数目,并且将过滤器查找模块与与一个应用程序相关联的两个或更多个不同前缀长度的组编程 。
    • 9. 发明授权
    • Hardware implementation of complex firewalls using chaining technique
    • 使用链接技术的复杂防火墙的硬件实现
    • US08800021B1
    • 2014-08-05
    • US13172621
    • 2011-06-29
    • Venkatasubramanian SwaminathanDeepak GoelJianhui HuangJohn KeenJean-Marc FrailongSrinivasan JagannadhanSrilakshmi Adusumalli
    • Venkatasubramanian SwaminathanDeepak GoelJianhui HuangJohn KeenJean-Marc FrailongSrinivasan JagannadhanSrilakshmi Adusumalli
    • G06F17/00
    • H04L63/0263H04L63/02H04L63/0209
    • A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action. The filter block may further determine whether a particular rule of the first hardware-implemented filter includes a next-filter action, where the next filter action identifies a third hardware-implemented filter; and process the third hardware-implemented filter independently of the sequence of hardware attachment points.
    • 防火墙设备可以包括包括过滤器块的转发组件。 滤波器块可以获得第一硬件实现的滤波器,其中硬件实现将第一硬件实现的滤波器限制为最大数量的规则; 确定与所访问的硬件实现的过滤器相关联的最后规则是否包括拆分过滤器动作,其中分割过滤器动作标识第二硬件实现的过滤器; 以及响应于确定所述最后一个规则包括所述分割过滤器动作,将所述第二硬件实现的过滤器链接到所述第一硬件实现的过滤器,以使得所述第二硬件实现的过滤器是所述第一硬件实现的过滤器的逻辑延续。 滤波器块还可以确定第一硬件实现的滤波器的特定规则是否包括下一个滤波器动作,其中下一个滤波器动作识别第三硬件实现的滤波器; 并且独立于硬件连接点的顺序处理第三个硬件实现的过滤器。
    • 10. 发明授权
    • Methods and apparatus to implement except condition during data packet classification
    • 在数据包分类期间实现除条件之外的方法和装置
    • US08798057B1
    • 2014-08-05
    • US12242278
    • 2008-09-30
    • Deepak GoelRamesh PanwarSrinivasan Jagannadhan
    • Deepak GoelRamesh PanwarSrinivasan Jagannadhan
    • H04L12/28H04J3/24
    • H04L45/745H04L45/302
    • In one embodiment, a method includes receiving a value associated with a data packet and identifying a data set based on the value. The data set is associated with a range of values and represents routing actions. The data set is a first data set from a plurality of data sets if the value is included in the range of values associated with the first data set. The data set is a default data set if the value is not included in a range of values associated with a data set from the plurality of data sets. The method includes combining the first data set with the default data set if the first data set is identified. The method includes combining the default data set with an except data set if the default data set is identified.
    • 在一个实施例中,一种方法包括接收与数据分组相关联的值并基于该值识别数据集。 数据集与值的范围相关联,并表示路由动作。 如果该值包括在与第一数据集相关联的值的范围内,则数据集是来自多个数据集的第一数据集。 如果该值不包括在与多个数据集中的数据集相关联的值的范围内,则数据集是默认数据集。 该方法包括如果识别出第一数据集,则将第一数据集合与默认数据集合。 该方法包括如果识别出默认数据集,则将默认数据集与除数据集合组合。