会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明授权
    • Host operating system bypass for packets destined for a virtual machine
    • 主机操作系统绕过去往虚拟机的数据包
    • US08005022B2
    • 2011-08-23
    • US11489943
    • 2006-07-20
    • Sunay TripathiTim P. MarslandNicolas G. DrouxKais Belgaied
    • Sunay TripathiTim P. MarslandNicolas G. DrouxKais Belgaied
    • H04L12/28
    • H04L12/4641
    • A method for processing packets that includes receiving a first packet for a first virtual machine by a network interface card (NIC), classifying the first packet using a hardware classifier, where the hardware classifier is located on the NIC, sending the first packet to a first one of a plurality of receive rings based on the classification, sending the first packet from the first one of the plurality of receive rings to a first virtual network interface card (VNIC), sending the first packet from the first VNIC to a first interface, and sending the first packet from the first interface to the first virtual machine, where the first virtual machine is associated with the first interface, where the first VNIC and the first virtual machine are executing on a host.
    • 一种处理分组的方法,包括通过网络接口卡(NIC)接收第一虚拟机的第一分组,使用硬件分类器对硬件分类器进行分类,其中硬件分类器位于NIC上,将第一分组发送到 将第一分组从多个接收环中的第一个发送到第一虚拟网络接口卡(VNIC),将第一分组从第一VNIC发送到第一接口 以及将所述第一分组从所述第一接口发送到所述第一虚拟机,其中所述第一虚拟机与所述第一接口相关联,其中所述第一VNIC和所述第一虚拟机在主机上执行。
    • 2. 发明申请
    • MANAGING TRAFFIC ON VIRTUALIZED LANES BETWEEN A NETWORK SWITCH AND A VIRTUAL MACHINE
    • 管理网络交换机与虚拟机之间虚拟化网络的通信
    • US20100303075A1
    • 2010-12-02
    • US12474671
    • 2009-05-29
    • Sunay TripathiNicolas G. DrouxKais Belgaied
    • Sunay TripathiNicolas G. DrouxKais Belgaied
    • H04L12/56
    • G06F13/385G06F2213/0058
    • A computer readable medium comprising software instructions for managing resources on a host, wherein the software instructions comprise functionality to: configure a classifier located on a NIC, to forward packets addressed to a first destination address to a first HRR mapped to a first VNIC, wherein packets addressed to the first destination address are associated with a first PFC lane; configure the classifier to forward packets addressed to a second destination address to a second HRR, wherein packets addressed to the second destination address are associated with a second PFC lane; and transmit, by the first VNIC, a pause frame associated with the first PFC lane to a switch operatively connected to the physical NIC, wherein the switch, in response to receiving the pause frame, stores packets associated with the first PFC lane in a buffer without transmitting the packets.
    • 一种包括用于管理主机上的资源的软件指令的计算机可读介质,其中所述软件指令包括以下功能:配置位于NIC上的分类器,将寻址到第一目的地地址的分组转发到映射到第一VNIC的第一HRR,其中 寻址到第一目的地地址的分组与第一PFC通道相关联; 配置分类器将寻址到第二目的地地址的分组转发到第二HRR,其中寻址到第二目的地地址的分组与第二PFC通道相关联; 并且由所述第一VNIC将与所述第一PFC通道相关联的暂停帧发送到可操作地连接到所述物理NIC的交换机,其中所述交换机响应于接收到所述暂停帧,将与所述第一PFC通道相关联的分组存储在缓冲器中 而不发送数据包。
    • 6. 发明授权
    • Method and apparatus for containing a denial of service attack using hardware resources on a network interface card
    • 用于在网络接口卡上使用硬件资源来包含拒绝服务攻击的方法和装置
    • US07966401B2
    • 2011-06-21
    • US11480100
    • 2006-06-30
    • Kais BelgaiedSunay TripathiNicolas G. Droux
    • Kais BelgaiedSunay TripathiNicolas G. Droux
    • G06F15/173G06F11/00
    • H04L63/1408H04L63/1458
    • A method for processing packets, where the method includes programming a hardware classifier in a network interface card (NIC) to send packets associated with a first packet destination to a non-standby hardware receive ring (HRR), programming a software ring to obtain packets from the non-standby HRR, programming the software ring to send packets for the first destination to a first software receive ring (SRR), wherein the first packet destination is associated with the first SRR, obtaining identifying information about a packet associated with a denial of service (DoS) attack, programming the hardware classifier, using the identifying information, to send the packet associated with the DoS attack to a standby HRR, and for each packet received by the hardware classifier determining to which of the standby HRR and the non-standby HRR to send the packet using the programming of the hardware classifier.
    • 一种处理分组的方法,其中所述方法包括对网络接口卡(NIC)中的硬件分类器进行编程,以将与第一分组目的地相关联的分组发送到非待机硬件接收环(HRR),编程软件环以获得分组 从所述非备用HRR,对所述软件环进行编程,以将所述第一目的地的分组发送到第一软件接收环(SRR),其中所述第一分组目的地与所述第一SRR相关联,获得关于拒绝的分组的标识信息 的服务(DoS)攻击,使用识别信息对硬件分类器进行编程,将与DoS攻击相关联的分组发送到备用HRR,并且对于由硬件分类器接收的每个分组来确定哪个待机HRR和非零 - 通过HRR发送包使用硬件分类器的编程。
    • 7. 发明授权
    • Multi-level packet classification
    • 多级分组分类
    • US07848331B2
    • 2010-12-07
    • US11490745
    • 2006-07-20
    • Kais BelgaiedNicolas G. DrouxSunay Tripathi
    • Kais BelgaiedNicolas G. DrouxSunay Tripathi
    • H04L12/56G06F12/00
    • H04L12/42H04L45/04H04L45/38
    • A method for processing a packet that includes receiving the packet where the packet comprises a header, and traversing a flow table comprising a plurality of flow table entries (FTEs) for each FTE encountered during the traversal, obtaining a packet matching function associated with the FTE, applying the packet matching function associated with the FTE to the header to determine whether the packet matches the FTE, if the packet matches the FTE, send the packet to one selected from the group consisting of one of a plurality of receive rings (RRs) and a first sub-flow table, where the first sub-flow table is associated with the FTE, stopping the traversal of the flow table, and if the packet does not match the FTE continue the traversal of the flow table.
    • 一种用于处理分组的方法,包括接收分组包括报头的分组,并且遍历包括在遍历期间遇到的每个FTE的多个流表条目(FTE)的流表,获得与所述FTE相关联的分组匹配功能 ,将与所述FTE相关联的分组匹配功能应用于所述报头,以确定所述分组是否与所述FTE匹配,如果所述分组与所述FTE匹配,则将所述分组发送到从由多个接收环(RR) 和第一子流表,其中第一子流表与FTE相关联,停止流表的遍历,并且如果分组不匹配FTE,继续遍历流表。
    • 8. 发明授权
    • Method and apparatus for dynamic assignment of network interface card resources
    • 网络接口卡资源的动态分配方法和装置
    • US07613198B2
    • 2009-11-03
    • US11479817
    • 2006-06-30
    • Kais BelgaiedSunay TripathiNicolas G. Droux
    • Kais BelgaiedSunay TripathiNicolas G. Droux
    • H04L12/28
    • H04L49/9063H04L47/10H04L49/90
    • A method for dynamically changing a virtual network interface card (VNIC) binding. If the use of a hardware receive ring (HRR) is below the first threshold and the use of the software receive ring (SRR) is above the second threshold, then: binding the first VNIC to the SRR and the second VNIC to the HRR, removing the binding from the first VNIC to the HRR, removing the binding from the second VNIC to the SRR, and reprogramming a hardware classifier to send packets associated with the r VNIC to a second HRR and to send packets associated with the second VNIC to the HRR, reprogramming a software classifier to send packets associated with the first VNIC to the SRR, wherein the software classifier is associated with a soft ring (SR) and the SR is configured to obtain packets from the second HRR.
    • 一种用于动态改变虚拟网络接口卡(VNIC)绑定的方法。 如果使用硬件接收环(HRR)低于第一阈值并且软件接收环(SRR)的使用高于第二阈值,则:将第一VNIC与SRR和第二VNIC绑定到HRR, 去除从第一VNIC到HRR的绑定,去除从第二VNIC到SRR的绑定,以及重新编程硬件分类器以将与r VNIC相关联的分组发送到第二HRR,并将与第二VNIC相关联的分组发送到 HRR重新编程软件分类器以将与第一VNIC相关联的分组发送到SRR,其中软件分类器与软环(SR)相关联,并且SR被配置为从第二HRR获得分组。
    • 9. 发明申请
    • Method and system for network configuration for virtual machines
    • 虚拟机网络配置方法和系统
    • US20080043756A1
    • 2008-02-21
    • US11489923
    • 2006-07-20
    • Nicolas G. DrouxKais BelgaiedErik NordmarkSunay Tripathi
    • Nicolas G. DrouxKais BelgaiedErik NordmarkSunay Tripathi
    • H04L12/56H04L12/28
    • H04L12/66
    • A method for changing network configuration parameters that includes generating a request to change a network configuration parameter, where the request is generated by a virtual machine, sending the request to a virtual network interface card (VNIC) associated with the virtual machine, sending the request to a VNIC configuration database associated with the VNIC, determining whether the virtual machine is allowed to change the network configuration parameter, if the virtual machine is allowed to change the network configuration parameter, updating the VNIC configuration database and VNIC to reflect the change in the network configuration parameter, and notifying the virtual machine that the change in network configuration parameter is allowed, and if the virtual machine is not allowed to change the network configuration parameter, dropping the request.
    • 一种用于改变网络配置参数的方法,所述方法包括生成改变网络配置参数的请求,所述请求由所述虚拟机产生,所述请求发送到与所述虚拟机相关联的虚拟网络接口卡(VNIC),发送所述请求 到与VNIC相关联的VNIC配置数据库,确定虚拟机是否被允许改变网络配置参数,如果虚拟机被允许改变网络配置参数,更新VNIC配置数据库和VNIC以反映该变更 网络配置参数,并通知虚拟机允许网络配置参数的更改,如果虚拟机不允许更改网络配置参数,则丢弃请求。
    • 10. 发明申请
    • Multi-level packet classification
    • 多级分组分类
    • US20080019360A1
    • 2008-01-24
    • US11490745
    • 2006-07-20
    • Kais BelgaiedNicolas G. DrouxSunay Tripathi
    • Kais BelgaiedNicolas G. DrouxSunay Tripathi
    • H04L12/56
    • H04L12/42H04L45/04H04L45/38
    • A method for processing a packet that includes receiving the packet where the packet comprises a header, and traversing a flow table comprising a plurality of flow table entries (FTEs) for each FTE encountered during the traversal, obtaining a packet matching function associated with the FTE, applying the packet matching function associated with the FTE to the header to determine whether the packet matches the FTE, if the packet matches the FTE, send the packet to one selected from the group consisting of one of a plurality of receive rings (RRs) and a first sub-flow table, where the first sub-flow table is associated with the FTE, stopping the traversal of the flow table, and if the packet does not match the FTE continue the traversal of the flow table.
    • 一种用于处理分组的方法,包括接收分组包括报头的分组,并且遍历包括在遍历期间遇到的每个FTE的多个流表条目(FTE)的流表,获得与所述FTE相关联的分组匹配功能 ,将与所述FTE相关联的分组匹配功能应用于所述报头,以确定所述分组是否与所述FTE匹配,如果所述分组与所述FTE匹配,则将所述分组发送到从由多个接收环(RR) 和第一子流表,其中第一子流表与FTE相关联,停止流表的遍历,并且如果分组不匹配FTE,继续遍历流表。