Intelligent firewall policy processor

    公开(公告)号:US12267300B2

    公开(公告)日:2025-04-01

    申请号:US18472050

    申请日:2023-09-21

    Abstract: An example network system includes processing circuitry and one or more memories coupled to the processing circuitry. The one or more memories are configured to store instructions which cause the system to obtain telemetry data, the telemetry data being associated with a plurality of applications running on a plurality of hosts. The instructions cause the system to, based on the telemetry data, determine a subset of applications of the plurality of applications that run on a first host of the plurality of hosts. The instructions cause the system to determine a subset of firewall policies of a plurality of firewall polices, each of the subset of firewall policies applying to at least one respective application of the subset of applications. The instructions cause the system to generate an indication of the subset of firewall policies and send the indication to a management plane of a distributed firewall.

    DEPENDENCY-AWARE SMART GREEN WORKLOAD SCALER

    公开(公告)号:US20250088434A1

    公开(公告)日:2025-03-13

    申请号:US18759383

    申请日:2024-06-28

    Abstract: An example system may include one or more memories and one or more processors. The one or more processors are configured to determine that a first workload depends on one or more other workloads. The one or more processors are configured to determine a measure of first carbon emission associated with the first workload and determine a predicted measure of second carbon emission associated with the one or more other workloads. The one or more processors are configured to determine a combined emission, the combined emission including the measure of the first carbon emission and the predicted measure of the second carbon emission. The one or more processors are configured to determine a replica count of the first workload based on the combined emission and an emission threshold and schedule spawning of replicas of the first workload or destruction of replicas of the first workload to implement the replica count.

    Self-correcting service level agreement enforcer

    公开(公告)号:US12238069B2

    公开(公告)日:2025-02-25

    申请号:US18472111

    申请日:2023-09-21

    Abstract: Example systems, methods, and storage media are described. An example network system includes processing circuitry and one or more memories coupled to the processing circuitry. The one or more memories are configured to store instructions which, when executed by the processing circuitry, cause the network system to obtain telemetry data. The instructions cause the network system to determine, based on the telemetry data, that an application running on server processing circuitry does not meet at least one service level agreement (SLA) requirement, the server processing circuitry not including processing circuitry resident on a network interface card (NIC). The instructions cause the network system to, based on the application not meeting the at least one SLA requirement, determine to offload at least one component of the application from the server processing circuitry to the processing circuitry resident on the NIC.

    NETWORK TELEMETRY-AWARE SCHEDULER
    35.
    发明申请

    公开(公告)号:US20240403139A1

    公开(公告)日:2024-12-05

    申请号:US18325760

    申请日:2023-05-30

    Abstract: In general, techniques are described for deploying workloads of containerized services to worker nodes in a network using network telemetry-aware scheduling. In an example, a method comprises establishing, by a computing system, an application performance baseline for an application based on application performance data and network telemetry data; based on determining that application performance has degraded from the application performance baseline, identifying, by the computing system, a correlation between a placement of a workload of the application to a first worker node of a plurality of worker nodes and the application performance data; and based on identifying the correlation, re-scheduling, by the computing system, the workload to a second worker node of the plurality of worker nodes.

    SELF-LEARNING SERVICE SCHEDULER FOR SMART NICS

    公开(公告)号:US20240275846A1

    公开(公告)日:2024-08-15

    申请号:US18640970

    申请日:2024-04-19

    CPC classification number: H04L67/1008 H04L41/16

    Abstract: An example method comprises determining, by an edge services controller, based on a respective predicted resource utilization value for each of a plurality of servers, a corresponding server weight for each of the plurality of servers; the plurality of servers comprising respective network interface cards (NICs), wherein each NIC of the plurality of NICs comprises an embedded switch and a processing unit coupled to the embedded switch; determining, by the edge services controller, based on a respective predicted resource utilization value for each of a plurality of services, a corresponding application weight for each of the plurality of services; and scheduling, by the edge services controller, based on the respective server weight for a server of the plurality of servers and the respective application weight for the service, a service of the plurality of services on the server.

    Intelligent Firewall Flow Processor
    39.
    发明公开

    公开(公告)号:US20240179121A1

    公开(公告)日:2024-05-30

    申请号:US18472123

    申请日:2023-09-21

    CPC classification number: H04L63/0236 H04L41/16

    Abstract: Example systems, methods, and storage media are described. An example network system includes processing circuitry and one or more memories coupled to the processing circuitry. The one or more memories are configured to store instructions which, when executed by the processing circuitry, cause the network system to obtain telemetry data, the telemetry data including flow processing data associated with a plurality of flows. The instructions cause the network system to rank the plurality of flows indicated by the telemetry data according to importance. The instructions cause the network system to send information indicative of a respective rank of at least one of the plurality of flows to at least one of a controller or a network interface card (NIC), the NIC comprising NIC processing circuitry.

    Self-learning service scheduler for smart NICs

    公开(公告)号:US11968251B1

    公开(公告)日:2024-04-23

    申请号:US18064803

    申请日:2022-12-12

    CPC classification number: H04L67/1008 H04L41/16

    Abstract: An example method comprises determining, by an edge services controller, based on a respective predicted resource utilization value for each of a plurality of servers, a corresponding server weight for each of the plurality of servers; the plurality of servers comprising respective network interface cards (NICs), wherein each NIC of the plurality of NICs comprises an embedded switch and a processing unit coupled to the embedded switch; determining, by the edge services controller, based on a respective predicted resource utilization value for each of a plurality of services, a corresponding application weight for each of the plurality of services; and scheduling, by the edge services controller, based on the respective server weight for a server of the plurality of servers and the respective application weight for the service, a service of the plurality of services on the server.

Patent Agency Ranking