REUSE OF EXECUTION ENVIRONMENTS WHILE GUARANTEEING ISOLATION IN SERVERLESS COMPUTING

    公开(公告)号:US20240121300A1

    公开(公告)日:2024-04-11

    申请号:US18529802

    申请日:2023-12-05

    CPC classification number: H04L67/1097 G05B2219/23428 G05B2219/34299

    Abstract: Systems, methods, and computer-readable media are provided for reusing execution environments and code of serverless functions while ensuring isolation in serverless computing environments. In some examples, a method can include, in response to a first request to run a serverless function, executing, at an execution environment on a network, computer-readable code configured to perform the serverless function; after the computer-readable code has executed, modifying a pointer to an area of memory used to store a first state of the serverless function to reference a different area of memory; in response to a second request to run the serverless function, reusing, at the execution environment, the computer-readable code to perform the serverless function; and based on the pointer referencing the different area of memory, using the different area of memory to store a second state of the serverless function.

    DISTRIBUTED TENANT OVERLAY NETWORK WITH CENTRALIZED ROUTING CONTROL PLANE

    公开(公告)号:US20230291683A1

    公开(公告)日:2023-09-14

    申请号:US18198437

    申请日:2023-05-17

    CPC classification number: H04L45/566 H04L45/02 H04L45/22 H04L45/24 H04L45/42

    Abstract: Techniques for multi-tenant overlays with per-tenant distributed routing are described herein. The techniques may include provisioning an overlay network such that tenants hosted by a forwarding plane of the overlay network are each configured to forward routing protocol packets to a routing control plane of the overlay network and the routing control plane of the overlay network is configured to determine routing paths between each tenant and respective destinations. A routing protocol packet may be sent to the routing control plane by a first tenant. The routing protocol packet may include an indication of a destination that is served by the first tenant. Based on receiving the routing protocol packet, the routing control plane may determine one or more routing paths between the tenants and the destination. Additionally, an indication of the routing path may be sent to the tenants.

    DEMAND-BASED SCALING OF ENTERPRISE WORKLOADS INTO CLOUD NETWORKS

    公开(公告)号:US20230275837A1

    公开(公告)日:2023-08-31

    申请号:US17681079

    申请日:2022-02-25

    CPC classification number: H04L47/12 H04L67/141 H04L67/148

    Abstract: Techniques for scaling additional capacity for secure access solutions and other workloads of enterprise edge networks in and out of a cloud-computing network based on demand. The techniques may include determining that a capacity associated with a secure access node of an enterprise edge network meets or exceeds a threshold capacity. Based at least in part on the capacity meeting or exceeding the threshold capacity, the techniques may include causing a facsimile of the secure access node to be spun up on a cloud-computing network that is remote from the enterprise edge network. In this way, new connection requests received from client devices can be redirected to the facsimile of the secure access node. Additionally, or alternatively, one or more existing connections between client devices and the secure access node may be migrated to the facsimile of the secure access node in the cloud.

    PRE-EMPTIVE FLOW DROPPING IN A CLOUD-BASED SECURE ACCESS SERVICE

    公开(公告)号:US20230269228A1

    公开(公告)日:2023-08-24

    申请号:US17585204

    申请日:2022-01-26

    CPC classification number: H04L63/0263 H04L45/38 H04L45/42 H04L63/0236

    Abstract: The present disclosure is directed to managing network traffic in a cloud-based secure access service. In one aspect, a method includes determining, by a controller of a cloud-based secure access service, that data packets from a user device should be dropped, a plurality of user devices, including the user device, being remotely connected to the controller for access to the cloud-based secure access service; determining, by the controller, a type of remote connection through which the user device is connected to the controller, each type of remote connection having a corresponding communication prototype; and transmitting a message, by the controller, to the user device, over a control protocol corresponding to the type of remote connection through which the user device is connected to the controller, the message providing a signal to the user device to drop packets at the user device prior to sending the packets to the controller.

    Identifying Execution Environments for Deploying Network Functions

    公开(公告)号:US20230221946A1

    公开(公告)日:2023-07-13

    申请号:US18114708

    申请日:2023-02-27

    CPC classification number: G06F8/65 H04L67/52

    Abstract: This disclosure describes techniques and mechanisms for using a domain-specific language (DSL) to express and compile serverless network functions, and optimizing the deployment location for the serverless network functions on network devices. In some examples, the serverless network functions may be expressed entirely in the DSL (e.g., via a text-based editor, a graphics-based editor, etc.), where the DSL is a computer language specialized to a particular domain, such as a network function domain. In additional examples, the serverless network functions may be expressed and compiled using a DSL in combination with a general-purpose language (GSL). Once the serverless network function have been expressed and/or compiled, the techniques of this disclosure further include determining an optimized network component on which the serverless network function is to execute, and deploying the serverless function to the optimized network component.

Patent Agency Ranking