DISTRIBUTED AND CENTRALIZED MODES FOR ISOLATION NETWORKS

    公开(公告)号:US20180109495A1

    公开(公告)日:2018-04-19

    申请号:US15485701

    申请日:2017-04-12

    Abstract: In one embodiment, a networking device in a local area network (LAN) receives an instruction from a server to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the server for analysis. The networking device establishes the virtual network overlay in the LAN to redirect traffic associated with the particular node to the server. The networking device determines that at least a portion of the traffic associated with the particular node should be processed locally within the LAN and not via redirection to the server and adjusts the virtual network overlay to process the at least a portion of the traffic associated with the particular node locally within the LAN and not via redirection to the server.

    NETWORK DEVICE MOVEMENT VALIDATION
    22.
    发明申请

    公开(公告)号:US20170339099A1

    公开(公告)日:2017-11-23

    申请号:US15156571

    申请日:2016-05-17

    Abstract: In one embodiment, a tracking device detects a first device connecting to a computer network, and forces an install of fake routing information on the first device that is unique to the first device. Upon detecting a second device connecting to the computer network, the second device having at least one identifying property in common with the first device and at least one identifying property differing from the first device, the tracking device may then query the second device to determine if the second device knows the fake routing information unique to the first device. As such, the tracking device may then determine that the second device is the first device in response to the second device knowing the fake routing information unique to the first device.

    SECURED NEIGHBOR DISCOVERY REGISTRATION UPON DEVICE MOVEMENT
    23.
    发明申请
    SECURED NEIGHBOR DISCOVERY REGISTRATION UPON DEVICE MOVEMENT 审中-公开
    安全的邻居发现设备运动的注册

    公开(公告)号:US20160380776A1

    公开(公告)日:2016-12-29

    申请号:US14753373

    申请日:2015-06-29

    Abstract: In one embodiment, a device in a network receives a request from a neighbor of the device to add the neighbor as a child of the device in the network. The request includes a signed address registration certificate that certifies that a network address of the neighbor is registered in the network. The device determines whether the signed address registration certificate is valid. The device adds the neighbor as a child of the device in the network based on a determination that the signed address registration certificate is valid.

    Abstract translation: 在一个实施例中,网络中的设备接收来自设备的邻居的请求,以将邻居添加为网络中设备的子节点。 该请求包括签署的地址注册证书,证明邻居的网络地址已在网络中注册。 设备确定签名的地址注册证书是否有效。 该设备基于签署的地址注册证书有效的确定将邻居作为设备的子系统添加到网络中。

    DEVICE MOBILITY IN A MESH NETWORK
    24.
    发明申请
    DEVICE MOBILITY IN A MESH NETWORK 有权
    网络中的设备移动性

    公开(公告)号:US20160330107A1

    公开(公告)日:2016-11-10

    申请号:US14707117

    申请日:2015-05-08

    Abstract: In one embodiment, a device in a network receives a notification from a neighbor of the device indicative of a child node of the device requesting a parent change from the device to the neighbor. The device updates an existing routing path from the device to the child node to be routed through the neighbor, in response to receiving the notification from the neighbor. The device receives an instruction to remove the updated routing path from the device to the child node through the neighbor. The device removes the updated routing path from the device to the child node, in response to receiving the instruction to remove the updated routing path.

    Abstract translation: 在一个实施例中,网络中的设备从设备的邻居接收指示设备的子节点的通知,请求从设备到邻居的父更改。 响应于接收到来自邻居的通知,设备更新从设备到子节点的现有路由路径以路由通过邻居。 设备接收到通过邻居将更新的路由路径从设备移除到子节点的指令。 响应于接收到删除更新的路由路径的指令,设备从设备移除更新的路由路径从设备到子节点。

    METHOD AND APPARATUS FOR VERIFYING SOURCE ADDRESSES IN A COMMUNICATION NETWORK
    25.
    发明申请
    METHOD AND APPARATUS FOR VERIFYING SOURCE ADDRESSES IN A COMMUNICATION NETWORK 有权
    用于在通信网络中验证源地址的方法和装置

    公开(公告)号:US20160212150A1

    公开(公告)日:2016-07-21

    申请号:US14598869

    申请日:2015-01-16

    CPC classification number: H04L63/126 H04L63/062 H04L63/162

    Abstract: In one embodiment, a method includes receiving a packet from an end node, the packet comprising an authenticated source MAC (Media Access Control) address and a source IP (Internet Protocol) address computed based on the authenticated source MAC address, and verifying the source IP address in the received packet, wherein verifying the source IP address comprises computing an IP address based on the authenticated source MAC address and comparing the computed IP address to the source IP address in the received packet to verify the source IP address. An apparatus is also disclosed herein.

    Abstract translation: 在一个实施例中,一种方法包括从终端节点接收分组,所述分组包括经认证的源MAC(媒体访问控制)地址和基于经认证的源MAC地址计算的源IP(因特网协议)地址,以及验证源 接收到的分组中的IP地址,其中验证源IP地址包括基于认证的源MAC地址来计算IP地址,并将计算的IP地址与接收到的分组中的源IP地址进行比较,以验证源IP地址。 本文还公开了一种装置。

    Repair of Failed Network Routing Arcs Using Data Plane Protocol
    26.
    发明申请
    Repair of Failed Network Routing Arcs Using Data Plane Protocol 有权
    使用数据平面协议修复失败的网络路由弧

    公开(公告)号:US20150163091A1

    公开(公告)日:2015-06-11

    申请号:US14155562

    申请日:2014-01-15

    CPC classification number: H04L45/28 H04L41/0668 H04L45/18 H04L45/48 H04L49/557

    Abstract: A network includes multiple routing arcs for routing network traffic to a destination. Each arc comprising nodes connected in sequence by reversible links oriented away from a node initially holding a cursor toward one of first and second edge nodes through which the network traffic exits the arc. Each node includes a network device. The nodes in the arc detect a first failure in the arc. Responsive to the detecting the first failure, the nodes exchange first management frames over a data plane within the arc in order to transfer the cursor from the node initially holding the cursor to a first node proximate the first failure and reverse links in the arc as appropriate so that the network traffic in the arc is directed away from the first failure toward the first edge node of the arc through which the network traffic is able to exit the arc.

    Abstract translation: 网络包括用于将网络流量路由到目的地的多个路由弧。 每个弧包括通过可逆的链接依次连接的节点,所述可逆链接朝向远离最初保持光标的节点朝向第一和第二边缘节点之一,网络业务通过该节点离开该弧。 每个节点包括网络设备。 弧中的节点检测到弧中的第一个故障。 响应于检测到第一故障,节点通过弧内的数据平面交换第一管理帧,以便将光标从最初保持光标的节点传送到靠近第一故障的第一节点,并且适当地在弧中反向链接 使得电弧中的网络流量被引导离开第一故障朝向电弧的第一边缘节点,网络业务通过该第一边缘节点能够离开电弧。

    OBFUSCATING SERVER-SIDE ADDRESSES
    27.
    发明申请

    公开(公告)号:US20250071088A1

    公开(公告)日:2025-02-27

    申请号:US18237574

    申请日:2023-08-24

    Abstract: Techniques for using Home Addresses, Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to obfuscate server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a Home Address that is mapped to the client device and at least one server IP address of the endpoint device. In this way, IP addresses of servers are obfuscated by a network mapping of the Home Addresses and the server IP addresses. The client device may then communicate data packets to the server using the Home Addresses as the destination address, and a virtual network service that works in conjunction with DNS can encapsulate the data packet with the server IP addresses and forward the data packet onto the server.

Patent Agency Ranking