DISTRIBUTED NETWORK ADDRESS AND PORT TRANSLATION FOR MIGRATING FLOWS BETWEEN SERVICE CHAINS IN A NETWORK ENVIRONMENT
    35.
    发明申请
    DISTRIBUTED NETWORK ADDRESS AND PORT TRANSLATION FOR MIGRATING FLOWS BETWEEN SERVICE CHAINS IN A NETWORK ENVIRONMENT 有权
    分布式网络地址和端口翻译在网络环境中的服务链之间的移动流

    公开(公告)号:US20150365323A1

    公开(公告)日:2015-12-17

    申请号:US14301767

    申请日:2014-06-11

    CPC classification number: H04L45/745 H04L47/18 H04L47/2441

    Abstract: An example method for distributed network address and port translation (NAPT) for migrating flows between service chains in a network environment is provided and includes distributing translation state for a flow traversing the network across a plurality of NAPT service nodes in the network, with packets belonging to the flow being translated according to the translation state, associating the flow with a first service chain at a flow classifier in the network, and updating the association when the flow migrates from the first service chain to a second service chain, with packets belonging to the migrated flow also being translated according to the translation state. The method may be executed at a pool manager in the network. In specific embodiments, the pool manager may include a distributed storage located across the plurality of NAPT service nodes.

    Abstract translation: 提供了一种用于在网络环境中的服务链之间迁移流的分布式网络地址和端口转换(NAPT)的示例方法,并且包括:跨越网络中的多个NAPT服务节点的跨流过的流的分发转换状态,分组属于 根据所述翻译状态对所述流进行翻译,将所述流与所述网络中的流分类器处的第一服务链相关联,以及当所述流从所述第一服务链迁移到第二服务链时更新所述关联,其中分组属于 迁移流也根据翻译状态进行翻译。 该方法可以在网络中的池管理器处执行。 在具体实施例中,池管理器可以包括跨越多个NAPT服务节点的分布式存储器。

    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT
    36.
    发明申请
    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT 有权
    在网络环境中提供虚拟的私人服务链

    公开(公告)号:US20150365322A1

    公开(公告)日:2015-12-17

    申请号:US14304043

    申请日:2014-06-13

    Abstract: A method provided in one embodiment includes receiving a first data packet of a data flow at a first classifier in which the first data packet includes a first identifier. The method further includes determining a second classifier associated with the first identifier in which the second classifier is further associated with at least one service chain of a service chain environment. The method still further includes forwarding the first data packet to the second classifier. The second classifier is configured to receive the first data packet, determine a particular service chain of the at least one service chain to which the first data packet is to be forwarded, and forward the first data packet to the particular service chain.

    Abstract translation: 在一个实施例中提供的方法包括在第一分类器处接收数据流的第一数据分组,其中第一数据分组包括第一标识符。 该方法还包括确定与第一标识符相关联的第二分类器,其中第二分类器进一步与服务链环境的至少一个服务链相关联。 该方法还包括将第一数据分组转发到第二分类器。 第二分类器被配置为接收第一数据分组,确定要转发第一数据分组的至少一个服务链的特定服务链,并将第一数据分组转发到特定服务链。

    SYSTEMS AND METHODS FOR DISTRIBUTING SD-WAN POLICIES

    公开(公告)号:US20240298180A1

    公开(公告)日:2024-09-05

    申请号:US18661055

    申请日:2024-05-10

    CPC classification number: H04W12/086 H04L63/0272 H04L63/20 H04W12/37 H04L45/64

    Abstract: In one embodiment, a router includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the router to perform operations including receiving software-defined networking in a wide area network (SD-WAN) policies from a component of an SD-WAN network. The operations also include establishing a session with a mobile device and receiving information associated with the mobile device in response to establishing the session with the mobile device. The operations further include filtering the SD-WAN policies based on the information associated with the mobile device to generate SD-WAN device-specific policies and communicating the SD-WAN device-specific policies to the mobile device.

    Clientless VPN Roaming with 802.1x Authentication

    公开(公告)号:US20210392492A1

    公开(公告)日:2021-12-16

    申请号:US16901248

    申请日:2020-06-15

    Abstract: The present disclosure is directed to systems and methods for clientless virtual private network (VPN) roaming with 802.1x authentication and includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause one or more components to perform operations including, receiving, at a local proxy, an 802.1x communication including authentication information from a remote device wirelessly connected to a visited network, wherein the remote device requests access to an enterprise network; authenticating the remote device with the enterprise network using the authentication information; establishing an encrypted tunnel between the visited network and the enterprise network; and transmitting data between the remote device and the enterprise network through the encrypted tunnel.

    SYSTEMS AND METHODS FOR DISTRIBUTING SD-WAN POLICIES

    公开(公告)号:US20210369309A1

    公开(公告)日:2021-12-02

    申请号:US17403676

    申请日:2021-08-16

    Abstract: In one embodiment, a router includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the router to perform operations including receiving software-defined networking in a wide area network (SD-WAN) policies from a component of an SD-WAN network. The operations also include establishing a session with a mobile device and receiving information associated with the mobile device in response to establishing the session with the mobile device. The operations further include filtering the SD-WAN policies based on the information associated with the mobile device to generate SD-WAN device-specific policies and communicating the SD-WAN device-specific policies to the mobile device.

Patent Agency Ranking