Elastic modification of application instances in a network visibility infrastructure

    公开(公告)号:US11750518B2

    公开(公告)日:2023-09-05

    申请号:US17104893

    申请日:2020-11-25

    Applicant: Gigamon Inc.

    Inventor: Anil Rao

    CPC classification number: H04L47/12 H04L45/7453

    Abstract: Introduced here are network visibility platforms having total processing capacity that can be dynamically varied in response to determining how much network traffic is currently under consideration. A visibility platform can include one or more network appliances, each of which includes at least one instance of an application configured to process data packets. Rather than forward all traffic to a single application instance for processing, the traffic can instead be distributed amongst a pool of application instances to collectively ensure that no data packets are dropped due to over-congestion. Moreover, the visibility platform can be designed such that application instances are elastically added/removed, as necessary, based on the volume of traffic currently under consideration.

    Optimal control of network traffic visibility resources and distributed traffic processing resource control system

    公开(公告)号:US11700205B2

    公开(公告)日:2023-07-11

    申请号:US17393359

    申请日:2021-08-03

    Applicant: Gigamon Inc.

    CPC classification number: H04L47/125 H04L43/022 H04L43/0876 H04L43/16

    Abstract: A method of optimizing network traffic visibility resources comprises receiving, by a controller associated with a network traffic visibility system, information indicative of operation of the network traffic visibility system. The method further comprises facilitating, by the controller, control of resources in the network traffic visibility system, according to a configured resource control policy. The facilitating can include providing, by the controller, control signaling to cause maximization of network traffic monitoring fidelity for a plurality of Quality of Service (QoS) classes of network traffic, based on a specified fixed amount of one or more network resources associated with the network traffic visibility system. Alternatively or additionally, the facilitating can include providing, by the controller, control signaling to cause minimization of use of the one or more network resources, based on a specified fixed level of traffic monitoring fidelity associated with the plurality of QoS classes.

    Dynamic service chaining and late binding

    公开(公告)号:US11595240B2

    公开(公告)日:2023-02-28

    申请号:US17142145

    申请日:2021-01-05

    Applicant: Gigamon Inc.

    Inventor: Anil Rao

    Abstract: A visibility platform can be used to monitor traffic traversing private cloud infrastructures and/or public cloud infrastructures. In some instances, the traffic is provided to a set of network services that are accessible to the visibility platform. These network services can be provisioned in a serial or parallel fashion. Network service chaining can be used to ensure that traffic streams skip unnecessary network services and receive only those network services that are needed. For example, an email service chain can include virus, spam, and phishing detection, while a video streaming service chain can include traffic shaping policies to satisfy quality of service (QoS) guarantees. When the visibility platform is represented as a graph that makes use of action sets, network service chains can be readily created or destroyed on demand.

    Tool port aware stateful protocol visibility for packet distribution

    公开(公告)号:US11463558B2

    公开(公告)日:2022-10-04

    申请号:US17183106

    申请日:2021-02-23

    Applicant: Gigamon Inc.

    Abstract: At least one technique for distributing traffic from a visibility node to a network tool is disclosed. In certain embodiments, the visibility node has a tool port through which to receive a plurality of packets which each include a compressed header. The visibility node determines, for each packet, whether a given network tool has received the compressed header in decompressed format based on a header-to-tool mapping structure. The structure includes information indicative of which packet headers each of the plurality of network tools have received in decompressed format. If the visibility node determines that the tool previously received the decompressed header, the visibility node transmits the packet to the network tool in compressed format. If the visibility node determines that the tool has not previously received the decompressed header, the visibility node decompresses the compressed header prior to transmitting the packet to the given network tool.

    Methods of manufacturing cable management assemblies for electronic appliances

    公开(公告)号:US11216046B2

    公开(公告)日:2022-01-04

    申请号:US16427236

    申请日:2019-05-30

    Applicant: Gigamon Inc.

    Abstract: A laminate curtain can suppress electromagnetic radiation leakage from an electronic appliance, as well as assist in managing cables interconnected to the electronic appliance. More specifically, a laminate curtain can include a conductive elastomer panel that absorbs spurious electromagnetic radiation generated by the electronic appliance, a conductive adhesive film disposed along one side of the conductive elastomer panel, and a conductive support frame affixed to the conductive adhesive film. The laminate curtain can be installed within a mounting frame, which secures the laminate curtain to the electronic appliance. Electromagnetic radiation that is absorbed by the conductive elastomer panel can travel to the electronic appliance via the conductive adhesive film, the conductive support frame, and the mounting frame. Thus, the conductive elastomer panel can be used to form a ground plane that catches and shunts the spurious electromagnetic radiation to the electronic appliance, which is grounded.

    Automated visual assistance for creating or debugging connections of a network device

    公开(公告)号:US11171840B2

    公开(公告)日:2021-11-09

    申请号:US16215420

    申请日:2018-12-10

    Applicant: Gigamon Inc.

    Abstract: Disclosed are a method and apparatus for assisting in the physical wiring or debugging of connections between devices, which may include one or more network visibility appliances. In at least one embodiment, the computer system receives first user input that specifies a first port of a plurality of selectable physical ports or a connection between the first port and a second port of the plurality of selectable physical ports. At least one of the first port or the second port is on a device that is external to the computer system. In response to the first user input, the computer system sends a first signal to the device to trigger the device to output a first visual indication in proximity to the first port, the first visual indication identifying the first port and a status of at least one of the first port or the connection.

    Dynamic Service Chaining and Late Binding

    公开(公告)号:US20210168016A1

    公开(公告)日:2021-06-03

    申请号:US17142145

    申请日:2021-01-05

    Applicant: Gigamon Inc.

    Inventor: Anil RAO

    Abstract: A visibility platform can be used to monitor traffic traversing private cloud infrastructures and/or public cloud infrastructures. In some instances, the traffic is provided to a set of network services that are accessible to the visibility platform. These network services can be provisioned in a serial or parallel fashion. Network service chaining can be used to ensure that traffic streams skip unnecessary network services and receive only those network services that are needed. For example, an email service chain can include virus, spam, and phishing detection, while a video streaming service chain can include traffic shaping policies to satisfy quality of service (QoS) guarantees. When the visibility platform is represented as a graph that makes use of action sets, network service chains can be readily created or destroyed on demand.

    Intelligent dropping of packets in a network visibility fabric

    公开(公告)号:US10931582B2

    公开(公告)日:2021-02-23

    申请号:US16101644

    申请日:2018-08-13

    Applicant: Gigamon Inc.

    Abstract: A network appliance deployed in a visibility fabric may intelligently drop certain low priority traffic to avoid indiscriminate dropping of data packets across all flow maps during periods of high congestion. More specifically, the network appliance may determine the data packets of a flow map should be dropped based on priority measures assigned on a per-flow map basis. Such a technique enables the network appliance to drop low priority traffic and forward high priority traffic downstream. Also introduced herein are techniques for metering traffic in order to gain better control over the traffic that is forwarded to an egress port of a network appliance. Because a network tool connected to the egress port can become easily overwhelmed, the network appliance may filter the traffic based on the priority of the flow maps to ensure that the network tool does not receive more traffic than can be handled.

    Distributed visibility fabrics for private, public, and hybrid clouds

    公开(公告)号:US10892941B2

    公开(公告)日:2021-01-12

    申请号:US16598416

    申请日:2019-10-10

    Applicant: Gigamon Inc.

    Inventor: Anil Rao

    Abstract: Improved network visibility may be achieved by deriving network traffic information from numerous visibility platforms that are communicatively coupled to one another. In some embodiments, an end user interacts with a distributed visibility fabric via a user interface, which can include a high-level representation of each visibility platform. The end user can then map the network objects of each visibility platform onto a series of network visibility appliances. This technique allows certain network objects (e.g., maps) to be intelligently distributed amongst the series of network visibility appliances.

    Elastic modification of application instances in a network visibility infrastructure

    公开(公告)号:US10855590B2

    公开(公告)日:2020-12-01

    申请号:US16119093

    申请日:2018-08-31

    Applicant: Gigamon Inc.

    Inventor: Anil Rao

    Abstract: Introduced here are network visibility platforms having total processing capacity that can be dynamically varied in response to determining how much network traffic is currently under consideration. A visibility platform can include one or more network appliances, each of which includes at least one instance of an application configured to process data packets. Rather than forward all traffic to a single application instance for processing, the traffic can instead be distributed amongst a pool of application instances to collectively ensure that no data packets are dropped due to over-congestion. Moreover, the visibility platform can be designed such that application instances are elastically added/removed, as necessary, based on the volume of traffic currently under consideration.

Patent Agency Ranking