知搜-全球专利检索

  1. 登录
  2. 注册

搜索结果

1921 条记录 (耗时 0.023 秒)

    APPLICATION BASED EGRESS INTERFACE SELECTION
    1.
    发明公开
    APPLICATION BASED EGRESS INTERFACE SELECTION 审中-公开

    公开(公告)号：US20240348704A1

    公开(公告)日：2024-10-17

    申请号：US18750943

    申请日：2024-06-21

    申请人： Nicira, Inc.

    发明人： Madhusudhan Ravi ,  Wilson Wang ,  Rajeev Nair

    IPC分类号： H04L69/16 ,  H04L45/00 ,  H04L45/302 ,  H04L45/745 ,  H04L47/125

    CPC分类号： H04L69/162 ,  H04L45/306 ,  H04L45/54 ,  H04L45/745 ,  H04L47/125

    摘要： A method of selecting an egress interface for a source process running on an electronic device is provided. The device implements a TCP/IP stack utilized by a plurality of applications for sending network packets. The method receives a packet from a particular application in the plurality of applications to send to a network destination over a socket tagged with an identifier of the particular application. The method compares the socket tag with a set of network egress interface tags. Each network egress interface tag is associated with a network egress interface in a plurality of network egress interfaces. Each network egress interface tag includes the identifier of an application that utilizes the network egress interface. The method selects a network egress interface with a tag that matches the socket tag. The method sends the packet to the network destination through the selected network egress interface.

    Method and apparatus for dynamically creating encryption rules
    2.
    发明授权
    Method and apparatus for dynamically creating encryption rules 有权

    公开(公告)号：US12093406B2

    公开(公告)日：2024-09-17

    申请号：US17669344

    申请日：2022-02-10

    申请人： Nicira, Inc.

    发明人： Kiran Kumar Thota ,  Azeem Feroz ,  James C. Wiese

    IPC分类号： G06F21/60 ,  G06F9/455 ,  G06F9/54 ,  G06F21/56 ,  G06F21/62 ,  G09C1/00 ,  H04L9/14 ,  H04L9/40

    CPC分类号： G06F21/602 ,  G06F9/45558 ,  G06F9/542 ,  G06F21/56 ,  G06F21/568 ,  G06F21/6236 ,  G09C1/00 ,  H04L9/14 ,  H04L63/0428 ,  H04L63/123 ,  H04L63/1408 ,  H04L63/1441 ,  G06F2009/45587 ,  G06F2221/034 ,  H04L2209/24

    摘要： For a host that executes one or more guest virtual machines (GVMs), some embodiments provide a novel encryption method for encrypting the data messages sent by the GVMs. The method initially receives a data message to send for a GVM executing on the host. The method then determines whether it should encrypt the data message based on a set of one or more encryption rules. When the process determines that it should encrypt the received data message, it encrypts the data message and forwards the encrypted data message to its destination; otherwise, the method just forwards the received data message unencrypted to its destination. In some embodiments, the host encrypts differently the data messages for different GVMs that execute on the host. When two different GVMs are part of two different logical overlay networks that are implemented on common network fabric, the method in some embodiments encrypts the data messages exchanged between the GVMs of one logical network differently than the data messages exchanged between the GVMs of another logical network. In some embodiments, the method can also encrypt different types of data messages from the same GVM differently. Also, in some embodiments, the method can dynamically enforce encryption rules in response to dynamically detected events, such as malware infections.

    Application based egress interface selection
    6.
    发明授权
    Application based egress interface selection 有权

    公开(公告)号：US12021952B2

    公开(公告)日：2024-06-25

    申请号：US17952318

    申请日：2022-09-26

    申请人： Nicira, Inc.

    发明人： Madhusudhan Ravi ,  Wilson Wang ,  Rajeev Nair

    IPC分类号： H04L45/74 ,  H04L45/00 ,  H04L45/302 ,  H04L69/16 ,  H04L45/745 ,  H04L47/125

    CPC分类号： H04L69/162 ,  H04L45/306 ,  H04L45/54 ,  H04L45/745 ,  H04L47/125

    摘要： A method of selecting an egress interface for a source process running on an electronic device is provided. The device implements a TCP/IP stack utilized by a plurality of applications for sending network packets. The method receives a packet from a particular application in the plurality of applications to send to a network destination over a socket tagged with an identifier of the particular application. The method compares the socket tag with a set of network egress interface tags. Each network egress interface tag is associated with a network egress interface in a plurality of network egress interfaces. Each network egress interface tag includes the identifier of an application that utilizes the network egress interface. The method selects a network egress interface with a tag that matches the socket tag. The method sends the packet to the network destination through the selected network egress interface.