专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10419327B2 Systems and methods for controlling switches to record network packets using a traffic monitoring network 有权
公开(公告)号：US10419327B2
公开(公告)日：2019-09-17
申请号：US15782735
申请日：2017-10-12
申请人： Big Switch Networks, Inc.
发明人： Ryan Izard , Robert Ling , Shudong Zhou , Sandip Shah
IPC分类号： H04L12/751 , H04L12/741 , H04L12/707 , H04L12/26
摘要： A packet forwarding network may include switches that forward network packets between end hosts. A monitoring network may be coupled to the forwarding network. A controller may control switches in the monitoring network to forward network packets tapped from the forwarding network to one or more packet recorders. The packet recorders may store the tapped packets and the controller may query the stored packets at a later time. The controller may analyze queried packets to monitor the operation of the packet forwarding network and, if desired, to display graphical visualizations associated with the packet forwarding network. If desired, the controller may instruct the packet recorders to replay the tapped packets to network visibility tools through the monitoring network. The controller may coordinate storage and query operations across multiple packet recorders using the monitoring network so that the packet storage capacity and recording rate may be scaled up over time.

2. 发明授权

US10250529B2 Systems and methods for performing logical network forwarding using a controller 有权
公开(公告)号：US10250529B2
公开(公告)日：2019-04-02
申请号：US14337178
申请日：2014-07-21
申请人： Big Switch Networks, Inc.
发明人： Gregor Mathias Maier , Vishnu Emmadi , Sudeep Dilip Modi , Kanzhe Jiang , Kuang-Ching Wang , Srinivasan Ramasubramanian , Mei Yang , Robert W. Sherwood , Mandeep Singh Dhami
IPC分类号： H04L12/713 , H04L12/717 , H04L12/931
摘要： A controller implemented on computing equipment may be used to control switches in a network. End hosts may be coupled to the switches. The controller may generate a virtual network topology of virtual switches, virtual routers, and virtual system routers that are distributed over underlying switches in the network. The controller may form virtual switches from respective groups of end hosts, virtual routers from groups of virtual switches that include virtual interfaces that are coupled to virtual switches, and a virtual system router from groups of virtual routers that includes virtual system router interfaces that are coupled to the virtual routers. The controller may control the virtual network topology by generating respective flow table entries based on identified network policies for each of the virtual routers, virtual system routers, and virtual switches. The controller may control the virtual system routers to route packets between the virtual routers.

3. 发明授权

US10043002B2 Optimization of service in-line chain traffic 有权
公开(公告)号：US10043002B2
公开(公告)日：2018-08-07
申请号：US15081201
申请日：2016-03-25
申请人： Big Switch Networks, Inc
发明人： Sandip Shah
IPC分类号： G06F15/16 , G06F21/55 , H04L29/06 , H04L12/801 , H04L12/725 , H04L12/743
摘要： Systems and methods to optimize processing of service in-line chain traffic are described. The system generates a program comprised of a first plurality of instructions, the first plurality of instructions being utilized to process traffic information that is being received from a first network and communicated to a second network. The traffic information including a plurality of flows of traffic information that is associated with a plurality of in-line services that is associated with a plurality of in-line service systems that are logically interposed between the first network and the second network with a ternary content-addressable memory (TCAM) that executes the plurality of instructions to forward the plurality of flows of traffic information. Next the system executes the first plurality of instructions with the TCAM.

4. 发明授权

US09356838B1 Systems and methods for determining network forwarding paths with a controller 有权
标题翻译：用控制器确定网络转发路径的系统和方法
公开(公告)号：US09356838B1
公开(公告)日：2016-05-31
申请号：US13843138
申请日：2013-03-15
申请人： Big Switch Networks, Inc.
发明人： Kuang-Ching Wang , Srinivasan Ramasubramanian
IPC分类号： H04L12/28 , H04L12/24
CPC分类号： H04L41/12
摘要： A controller may control switches in a network that forwards network packets between end hosts. The controller may generate a directed acyclic graph based on maintained network topology information. The directed acyclic graph may include multiple network paths between any given pair of switches. For a given network packet received from an end host, the controller may generate an identifier or otherwise classify the network packet based on network attributes of the network packet. The network attributes may include packet header information retrieved from the network packet, information maintained by the controller such as which virtual switch is associated with the network packet, and/or other network attributes. The controller may use the network packet identifier to select a network forwarding path for the network packet from the directed acyclic graph.
摘要翻译：控制器可以控制在终端主机之间转发网络分组的网络中的交换机。控制器可以基于维护的网络拓扑信息生成有向非循环图。有向非循环图可以包括任何给定的一对开关之间的多个网络路径。对于从终端主机接收到的给定网络分组，控制器可以基于网络分组的网络属性生成标识符或以其他方式对网络分组进行分类。网络属性可以包括从网络分组检索的分组报头信息，由控制器维护的信息，例如哪个虚拟交换机与网络分组相关联，和/或其他网络属性。控制器可以使用网络分组标识符从有向无环图中选择网络分组的网络转发路径。

5. 发明申请

US20150138993A1 SYSTEMS AND METHODS FOR TESTING NETWORKS WITH A CONTROLLER 有权
标题翻译：用控制器测试网络的系统和方法
公开(公告)号：US20150138993A1
公开(公告)日：2015-05-21
申请号：US14085538
申请日：2013-11-20
申请人： Big Switch Networks, Inc.
发明人： R. Kyle Forster , Shudong Zhou , Robert W. Sherwood , Jason Parraga
IPC分类号： H04L12/24
CPC分类号： H04L41/12 , H04L41/24 , H04L43/50
摘要： A controller may control switches such as physical and software switches in a network. The controller may generate virtual switches from groups of end hosts in forming a virtual network topology. The controller may receive one or more network policy rules that govern network traffic through the switches. For a given network policy rule, the controller may perform a test in determining whether the network satisfies the network policy rule. The test may be performed based on a testing rule identifying test parameters and expected test results. The controller may perform tests in determining whether the network satisfies the testing rule and the corresponding network policy rule. The tests may be performed via simulation at the controller or by injecting a tagged test packet into the network.
摘要翻译：控制器可以控制诸如网络中的物理和软件交换机的交换机。控制器可以在形成虚拟网络拓扑结构的情况下从终端主机组生成虚拟交换机。控制器可以接收通过交换机来管理网络流量的一个或多个网络策略规则。对于给定的网络策略规则，控制器可以在确定网络是否满足网络策略规则时执行测试。可以基于识别测试参数和预期测试结果的测试规则来执行测试。控制器可以在确定网络是否满足测试规则和相应的网络策略规则时执行测试。测试可以通过控制器的仿真或通过将标记的测试分组注入网络来执行。

6. 发明授权

US08416796B2 Systems and methods for managing virtual switches 有权
标题翻译：用于管理虚拟交换机的系统和方法
公开(公告)号：US08416796B2
公开(公告)日：2013-04-09
申请号：US13103012
申请日：2011-05-06
申请人： R. Kyle Forster , Omar Baldonado , Robert K. Vaterlaus , Guido Appenzeller
发明人： R. Kyle Forster , Omar Baldonado , Robert K. Vaterlaus , Guido Appenzeller
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L41/0806 , H04L41/0813 , H04L41/0893 , H04L45/38
摘要： Network switches that are controlled by a controller server may contain ports through which network packets are received and forwarded. An architect may configure the controller server to create virtual switches. Each virtual switch may be formed from a subset of the ports of the network switches. The architect may assign administrators to the virtual switches. The administrators may configure the virtual switches. An administrator may use a command line interface to configure a virtual switch. The administrator may use commands such as a show port command, an access list command, a show access list command, and a membership rule command to manage the virtual switch. The controller server may prevent the administrator from logging on to virtual switches that have been assigned to other administrators.
摘要翻译：由控制器服务器控制的网络交换机可能包含接收和转发网络数据包的端口。建筑师可以配置控制器服务器来创建虚拟交换机。每个虚拟交换机可以由网络交换机的端口的子集形成。架构师可以将管理员分配给虚拟交换机。管理员可以配置虚拟交换机。管理员可以使用命令行界面配置虚拟交换机。管理员可以使用show port命令，access list命令，show access list命令和membership rule命令来管理虚拟交换机。控制器服务器可能会阻止管理员登录到已分配给其他管理员的虚拟交换机。

7. 发明授权

US10419421B2 Systems and methods to securely construct a network fabric 有权
公开(公告)号：US10419421B2
公开(公告)日：2019-09-17
申请号：US15234757
申请日：2016-08-11
申请人： Big Switch Networks, Inc.
发明人： Andreas Wundsam , Gregor Maier , Carl D. Roth , Jeffrey Townsend , Jason Parraga , Cham Ho Li , Tomasz Klimczyk
IPC分类号： H04L29/06 , G06F9/4401 , G06F13/40 , H04L12/24
摘要： Methods, systems, and computer programs are presented for creating a secure network fabric and for adding trusted devices to an existing secure network fabric. One method includes an operation for setting a switch into a provisioning mode where the switch does not enforce secure communications. While the switch is in provisioning mode, the method performs operations including establishing a connection from the switch to a provisioning controller, sending a certificate signing request (CSR) from the switch to the provisioning controller, and receiving, from the provisioning controller, a security certificate generated by a certificate authority. The method further includes an operation for entering a lockdown mode by the switch after receiving the security certificate, where the switch, while in lockdown mode, secures communications utilizing the security certificate.

8. 发明授权

US10264040B2 Systems and methods to manage multicast traffic 有权
公开(公告)号：US10264040B2
公开(公告)日：2019-04-16
申请号：US15227856
申请日：2016-08-03
申请人： Big Switch Networks, Inc
发明人： Mary Preeti Manohar , Rajneesh Bajpai , Ning Song , Srinivasan Ramasubramanian , Shunjia Yu , Richard Lane , Kiran Gandhi Poola , Kenneth H. Chiang , Robert W. Sherwood
IPC分类号： H04L29/06 , H04L12/18 , H04L12/761 , H04L12/44 , H04L12/46 , H04L12/755
摘要： In various example embodiments, a system and method for optimizing management of a multicast tree are disclosed. The system receives first multicast group member information, from over a network and via a first packet forwarding system, at a controller server that provides for control of a network comprised of a first virtual local area network including a first packet forwarding system, the first multicast group member information being received by the first packet forwarding system and describing a first end-host computer as joining a first multicast group on the first virtual local area network. The system generates a multicast tree, at the controller server, and communicates a network configuration message to at least one packet forwarding system of a first plurality of packet forwarding systems to enable communication of the multicast traffic for the first multicast group over a portion of the multicast tree.

9. 发明授权

US10097413B2 Building a hyper-scale monitoring fabric 有权
公开(公告)号：US10097413B2
公开(公告)日：2018-10-09
申请号：US15081166
申请日：2016-03-25
申请人： Big Switch Networks, Inc
发明人： Shudong Zhou , Sandip Shah , Andrew Shaw
IPC分类号： H04L12/24 , H04L12/707 , H04L29/12
摘要： Systems and methods for building a hyper-scale monitoring fabric are described. The system receives a duplicate of a first portion of traffic information from a production network as first traffic information and communicates the first traffic information in the hyper-scale monitoring fabric. The first traffic information is communicated to a controller computer that configures the hyper-scale monitoring fabric. The system receives a duplicate of a second portion of the traffic information from the production network as second traffic information. The system forwards the second traffic information to a tool farm.

10. 发明授权

US09600263B2 Systems and methods for performing uninterrupted network upgrades with controllers 有权
公开(公告)号：US09600263B2
公开(公告)日：2017-03-21
申请号：US14337193
申请日：2014-07-21
申请人： Big Switch Networks, Inc.
发明人： Michael Stolarchuk , Carl D. Roth , Alok Shankar , Robert K. Vaterlaus , Srinivasan Ramasubramanian , Andreas Wundsam , Robert W. Sherwood , Rajneesh Bajpai
IPC分类号： G06F9/445 , H04L12/24 , H04L29/08
CPC分类号： G06F8/65 , G06F8/61 , G06F8/63 , H04L41/082 , H04L41/0889 , H04L67/34
摘要： First and second controllers implemented on computing equipment may be used to control switches in a network. The switches may forward network packets between end hosts. The second controller may identify first and second redundant partitions of switches in the network that are each coupled to all of the end hosts. The first controller may instruct the first partition to install software while the second partition forwards network traffic and may instruct the second partition to install software while the first partition forwards network traffic. The first controller may install the software while the second controller is active and the second controller may install the software while the first controller is active. In this way, the switches and controllers may be provided with an uninterrupted software upgrade and packets may be forwarded between end hosts during the software upgrade without introducing packet loss or other noticeable reductions in network performance.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式