公开(公告)号：US09154577B2

公开(公告)日：2015-10-06

申请号：US13154399

申请日：2011-06-06

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F15/177 ,  H04L29/08 ,  H04L29/06

CPC分类号： H04L41/084 ,  H04L29/06 ,  H04L41/0806 ,  H04L41/0816 ,  H04L67/34

摘要： Synchronization of configuration files of a virtual application distribution chassis, includes: processing a configuration command received by a master blade; updating a first configuration file with the configuration command and an updated tag by the master blade; sending a configuration message by the master blade to the slave blades informing of the updated configuration file, the configuration message comprising the updated tag; in response to receiving the configuration message by a given slave blade of the one or more slave blades, comparing the updated tag in the configuration message with a tag in a second configuration file stored at the given slave blade; and in response to determining that the updated tag in the configuration message is more recent than the tag in the second configuration file stored at the given slave blade, sending a request for the updated configuration file to the master blade by the given slave blade.

摘要翻译： 虚拟应用分发机箱的配置文件同步包括：处理主刀片接收的配置命令; 使用配置命令更新第一配置文件和由主刀片更新的标签; 将所述主刀片的配置消息发送到所述从属刀片，通知所述更新的配置文件，所述配置消息包括所述更新的标签; 响应于由一个或多个从属刀片的给定从属刀片接收配置消息，将配置消息中的更新标签与存储在给定从属刀片上的第二配置文件中的标签进行比较; 并且响应于确定配置消息中的更新的标签比存储在给定从属刀片中的第二配置文件中的标签更新，由给定从属刀片向主刀片发送对更新的配置文件的请求。

公开(公告)号：US08572228B2

公开(公告)日：2013-10-29

申请号：US12785423

申请日：2010-05-21

申请人： Ronald W. Szeto ,  David Chun Ying Cheung ,  Rajkumar Jalan

发明人： Ronald W. Szeto ,  David Chun Ying Cheung ,  Rajkumar Jalan

IPC分类号： G06F15/173

CPC分类号： H04L67/1002 ,  H04L63/0218 ,  H04L63/1458 ,  H04L67/1031 ,  H04L67/1036 ,  H04L67/2842

摘要： Each service in a computer network may have a connection rate limit. The number of new connections per time period may be limited by using a series of rules. In a specific embodiment of the present invention, a counter is increased each time a server is selected to handle a connection request. For each service, connections coming in are tracked. Therefore, the source of connection-request packets need not be examined. Only the destination service is important. This saves significant time in the examination of the incoming requests. Each service may have its own set of rules to best handle the new traffic for its particular situation. For server load balancing, a reset may be sent to the source address of the new connection request. For transparent cache switching, the connection request may be forwarded to the Internet.

摘要翻译： 计算机网络中的每个服务可能具有连接速率限制。 每个时间段的新连接数可以通过使用一系列规则来限制。 在本发明的具体实施例中，每当选择服务器来处理连接请求时，增加计数器。 对于每个服务，跟踪进入的连接。 因此，不需要检查连接请求数据包的来源。 只有目的地服务很重要。 这样可以节省大量时间来检查传入的请求。 每个服务可能有自己的一套规则，以便为特定情况最好地处理新的流量。 对于服务器负载平衡，可以将重置发送到新连接请求的源地址。 对于透明缓存切换，连接请求可以被转发到因特网。

公开(公告)号：US20130166762A1

公开(公告)日：2013-06-27

申请号：US13337030

申请日：2011-12-23

申请人： Rajkumar JALAN ,  Feilong XU ,  Rishi SAMPAT

发明人： Rajkumar JALAN ,  Feilong XU ,  Rishi SAMPAT

IPC分类号： G06F15/16

CPC分类号： H04L69/22 ,  G06F9/505 ,  H04L43/0817 ,  H04L61/00 ,  H04L61/103 ,  H04L61/1541 ,  H04L61/2007 ,  H04L61/255 ,  H04L67/00 ,  H04L67/02 ,  H04L67/1008 ,  H04L67/28 ,  H04L67/2814

摘要： In activating a service, a service gateway retrieves a service table entry using a service or server address of the service entry, where the service table entry has an association with another service entry. An association to the service entry is added and a marker value is set to indicate associations with two service entries. After a time duration, the association with the other service entry is removed, and the marker value is changed accordingly. In deactivating a service entry, the service gateway calculates a hash value for the service or server address of the service entry. After matching the hash value to a hash value of another service entry, an association with the other service entry is added. A marker value is set to indicate associations with two service entries. After a time duration, the association with the service entry is removed, and the marker value is changed accordingly.

公开(公告)号：US20120120952A1

公开(公告)日：2012-05-17

申请号：US13278599

申请日：2011-10-21

申请人： Rajkumar Jalan ,  Louis Yun ,  Ivy Pei-Shan Hsu

发明人： Rajkumar Jalan ,  Louis Yun ,  Ivy Pei-Shan Hsu

IPC分类号： H04L12/56

CPC分类号： H04L12/4633 ,  H04L12/185 ,  H04L12/1886 ,  H04L12/4641 ,  H04L49/354 ,  H04L63/0272

摘要： Multicast capability in a virtual private LAN service (VPLS) is provided in a provider IP/MPLS infrastructure without headend replications by encapsulating a customer data packet to use an established multicast protocol, such as IP multicast. In one example, the customer data packet is encapsulated by an IP header having an IP multicast group address and an Ethernet header. In one implementation, a DNS type mechanism is provided to distribute the IP multicast addresses for VPLS use. Such IP multicast group address can be set aside from an administratively scoped address range. An efficient IP routing algorithm running on the provider's network provides an efficient distribution tree for routing IP-encapsulated customer packet for the VPLS.

摘要翻译： 虚拟专用LAN服务（VPLS）中的组播能力通过封装客户数据包来使用已建立的多播协议（如IP多播），在提供商IP / MPLS架构中提供无前端复制功能。 在一个示例中，客户数据分组由具有IP多播组地址和以太网报头的IP报头来封装。 在一个实现中，提供DNS类型机制来分发用于VPLS使用的IP多播地址。 这样的IP组播组地址可以从管理范围的地址范围来设置。 在提供商网络上运行的高效IP路由算法为VPLS路由IP封装的客户数据包提供了一个有效的分配树。

公开(公告)号：US20120008635A1

公开(公告)日：2012-01-12

申请号：US13185885

申请日：2011-07-19

申请人： Andrew Tai-Chin Kuo ,  Ivy Pei-Shan Hsu ,  Jordi Moncada-Elias ,  Rajkumar Jalan ,  Gurudeep Kamat

发明人： Andrew Tai-Chin Kuo ,  Ivy Pei-Shan Hsu ,  Jordi Moncada-Elias ,  Rajkumar Jalan ,  Gurudeep Kamat

IPC分类号： H04L12/56

CPC分类号： H04L49/552 ,  H04L43/0876 ,  H04L45/00 ,  H04L45/18 ,  H04L45/32 ,  H04L45/48 ,  H04L45/586 ,  H04L69/40

摘要： Systems and methods are described for providing network route redundancy through Layer 2 devices, such as a loop free Layer 2 network having a plurality of switching devices. A virtual switch is coupled to the loop free Layer 2 network, the virtual switch having two or more switches configured to transition between master and backup modes to provide redundant support for the loop free Layer 2 network, the switches communicating their status through use of a plurality of redundancy control packets. The system also includes means for allowing the redundancy control packets to be flooded through the Layer 2 network. The means may include time-to-live data attached to the redundancy control packet which is decremented only when the packets are transferred through devices which are configured to recognize the protocol used in redundancy control packets.

摘要翻译： 描述了通过第2层设备提供网络路由冗余的系统和方法，例如具有多个交换设备的无环路的二层网络。 虚拟交换机耦合到无环路的二层网络，虚拟交换机具有两个或多个交换机，配置为在主模式和备用模式之间转换，为无环路的二层网络提供冗余支持，交换机通过使用 多个冗余控制分组。 该系统还包括允许冗余控制分组通过第2层网络淹没的装置。 该装置可以包括附加到冗余控制分组的生存时间数据，只有当分组通过被配置为识别在冗余控制分组中使用的协议的设备传送时，该冗余控制分组才递减。

公开(公告)号：US08024441B2

公开(公告)日：2011-09-20

申请号：US11707697

申请日：2007-02-16

申请人： Sunanda Lakshmi Kommula ,  Ivy Pei-Shan Hsu ,  Rajkumar Jalan ,  David Chun Ying Cheung

发明人： Sunanda Lakshmi Kommula ,  Ivy Pei-Shan Hsu ,  Rajkumar Jalan ,  David Chun Ying Cheung

IPC分类号： G06F15/173

CPC分类号： H04L67/1002 ,  H04L67/1008 ,  H04L67/1012 ,  H04L67/1021

摘要： A global server load-balancing (GSLB) switch serves as a proxy to an authoritative DNS and communicates with numerous site switches that are coupled to host servers serving specific applications. The GSLB switch receives from site switches operational information regarding host servers within the site switches neighborhood. When a client program requests a resolution of a host name, the GSLB switch, acting as a proxy of an authoritative DNS, returns one or more ordered IP addresses for the host name. The IP addresses are ordered using metrics that include the information collected from the site switches. In one instance, the GSLB switch places the address that is deemed “best” at the top of the list.

摘要翻译： 全局服务器负载平衡（GSLB）交换机用作授权DNS的代理，并与多个站点交换机进行通信，这些站点交换机与服务于特定应用程序的主机服务器相连。 GSLB交换机从站点交换机接收关于站点交换机附近的主机服务器的操作信息。 当客户端程序请求解析主机名时，作为权威DNS的代理的GSLB交换机返回主机名的一个或多个有序IP地址。 IP地址使用包含从站点交换机收集的信息的度量来排序。 在一个实例中，GSLB开关将地址视为“最佳”位于列表的顶部。

公开(公告)号：US20100046556A1

公开(公告)日：2010-02-25

申请号：US12615142

申请日：2009-11-09

申请人： Nitin Jain ,  Rajkumar Jalan

发明人： Nitin Jain ,  Rajkumar Jalan

IPC分类号： H04J3/24

CPC分类号： H04L47/10 ,  G06F15/17368 ,  H04L12/2852 ,  H04L47/2433

摘要： Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control on the MAC layer.

摘要翻译： 提供的解决方案允许网络设备在考虑到流量帧的优先级的情况下对MAC层应用流量控制。 这可以通过生成指示业务流应该被暂停，同时利用新的操作码值，或者通过利用新的类型/长度值（可能与新的操作码值组合）来实现。 然后，接收设备可以检查帧的字段以确定是否应该使用基于优先级的暂停，然后检查其他字段以确定要暂停的优先级等级以及多长时间。 这样可以提高MAC层的流量控制效率。

公开(公告)号：US07639608B1

公开(公告)日：2009-12-29

申请号：US10693037

申请日：2003-10-23

申请人： Nitin Jain ,  Rajkumar Jalan

发明人： Nitin Jain ,  Rajkumar Jalan

IPC分类号： H04L12/28 ,  H04L12/56 ,  G06F15/16

CPC分类号： H04L47/10 ,  G06F15/17368 ,  H04L12/2852 ,  H04L47/2433

摘要： Solutions are provided that allow a network device to apply flow control on the MAC layer while taking into account the priority of the frame of traffic. This may be accomplished by generating a frame indicating that traffic flow should be paused, while utilizing a new opcode value, or alternatively by utilizing a new type/length value (possibly combined with a new opcode value). A receiving device may then examine the fields of the frame to determine whether it should it should use priority-based pausing, and then examine other fields to determine which priority-levels to pause and for how long. This allows for improved efficiency in flow control on the MAC layer.

摘要翻译： 提供的解决方案允许网络设备在考虑到流量帧的优先级的情况下对MAC层应用流量控制。 这可以通过生成指示业务流应该被暂停，同时利用新的操作码值，或者通过利用新的类型/长度值（可能与新的操作码值组合）来实现。 然后，接收设备可以检查帧的字段以确定是否应该使用基于优先级的暂停，然后检查其他字段以确定要暂停的优先级等级以及多长时间。 这样可以提高MAC层的流量控制效率。

公开(公告)号：US07254626B1

公开(公告)日：2007-08-07

申请号：US10206580

申请日：2002-07-25

申请人： Sunanda Lakshmi Kommula ,  Ivy Pei-Shan Hsu ,  Rajkumar Jalan ,  David Chun Ying Cheung

发明人： Sunanda Lakshmi Kommula ,  Ivy Pei-Shan Hsu ,  Rajkumar Jalan ,  David Chun Ying Cheung

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L67/1002 ,  H04L67/1008 ,  H04L67/1012 ,  H04L67/1021

摘要： A global server load-balancing (GSLB) switch serves as a proxy to an authoritative DNS and communicates with numerous site switches that are coupled to host servers serving specific applications. The GSLB switch receives from site switches operational information regarding host servers within the site switches neighborhood. When a client program requests a resolution of a host name, the GSLB switch, acting as a proxy of an authoritative DNS, returns one or more ordered IP addresses for the host name. The IP addresses are ordered using metrics that include the information collected from the site switches. In one instance, the GSLB switch places the address that is deemed “best” at the top of the list.

摘要翻译： 全局服务器负载平衡（GSLB）交换机用作授权DNS的代理，并与多个站点交换机进行通信，这些站点交换机与服务于特定应用程序的主机服务器相连。 GSLB交换机从站点交换机接收关于站点交换机附近的主机服务器的操作信息。 当客户端程序请求解析主机名时，作为权威DNS的代理的GSLB交换机返回主机名的一个或多个有序IP地址。 IP地址使用包含从站点交换机收集的信息的度量来排序。 在一个实例中，GSLB开关将地址视为“最佳”位于列表的顶部。

公开(公告)号：US20140325588A1

公开(公告)日：2014-10-30

申请号：US14261322

申请日：2014-04-24

申请人： Rajkumar Jalan ,  Ronald Wai Lun Szeto ,  Steven Wu

发明人： Rajkumar Jalan ,  Ronald Wai Lun Szeto ,  Steven Wu

IPC分类号： H04L29/06

CPC分类号： H04L63/1466 ,  H04L63/0876 ,  H04L63/101 ,  H04L63/1458

摘要： Network access control systems and methods are provided herein. A method includes receiving at a network device a SYN packet from a client device over a network, determining if the client device is a trusted source for the network using the SYN packet, if the client device is a trusted resource, receiving an acknowledgement (ACK) packet from the client device that includes identifying information for the client device plus an additional value, and identifying information for the network device, and establishing a connection with the network for the client device.

摘要翻译： 本文提供了网络访问控制系统和方法。 一种方法包括在网络设备处通过网络从客户端设备接收SYN分组，如果客户机设备是可信资源，则确定客户端设备是否是使用SYN分组的网络的可信源，接收到确认 ）分组，其包括客户端设备的识别信息加上附加值，以及识别网络设备的信息，以及建立与客户端设备的网络的连接。