-
公开(公告)号:US09992103B2
公开(公告)日:2018-06-05
申请号:US14162954
申请日:2014-01-24
Applicant: Cisco Technology, Inc.
Inventor: Hendrikus G. P. Bosch , Peter Weinberger , Praveen Bhagwatula , Michael E. Lipman , Alessandro Duminuco , Louis Gwyn Samuel
IPC: H04L12/721 , H04W24/02
Abstract: Presented herein are techniques to reduce the number of redirected subscriber packet flows while performing sticky hierarchical load balancing. An Nth head end network element may be activated such that a plurality of N head end network elements are active and capable of receiving and processing one or more packet flows. A primary load balancer may then be directed to overwrite a portion of pointers of a hash table in an evenly distributed manner with pointers to the Nth head end network element such that packet flows are forwarded to the Nth head end network element, wherein the hash table retains a static number of entries as the number of head end network elements is modified.
-
公开(公告)号:US09509614B2
公开(公告)日:2016-11-29
申请号:US13923257
申请日:2013-06-20
Applicant: CISCO TECHNOLOGY, INC.
Inventor: Hendrikus G. P. Bosch , David Richard Barach , Michael E. Lipman , Alessandro Duminuco , James N. Guichard , Humberto J. La Roche
IPC: H04L12/803
CPC classification number: H04L47/125
Abstract: An example method for load balancing in a network environment is provided and includes receiving a packet from a first stage load-balancer in a network environment, where the packet is forwarded from the first stage load-balancer to one of a plurality of second stage load-balancers in the network according to a hash based forwarding scheme, and routing the packet from the second stage load-balancer to one of a plurality of servers in the network according to a per-session routing scheme. The per-session routing scheme includes retrieving a session routing state from a distributed hash table in the network. In a specific embodiment, the hash based forwarding scheme includes equal cost multi path routing. The session routing state can include an association between a next hop for the packet and the packet's 5-tuple representing a session to which the packet belongs.
Abstract translation: 提供了一种用于在网络环境中进行负载平衡的示例性方法,并且包括在网络环境中从第一级负载平衡器接收分组,其中分组从第一级负载平衡器转发到多个第二级负载 根据基于散列的转发方案的网络中的平衡器,并且根据每会话路由方案将分组从第二阶段负载平衡器路由到网络中的多个服务器之一。 每会话路由方案包括从网络中的分布式哈希表检索会话路由状态。 在具体实施例中,基于散列的转发方案包括相同成本的多路径路由。 会话路由状态可以包括分组的下一跳与分组所属的会话的分组的5元组之间的关联。
-
公开(公告)号:US10609042B2
公开(公告)日:2020-03-31
申请号:US15387123
申请日:2016-12-21
Applicant: Cisco Technology, Inc.
Inventor: Paul Quinn , Michael E. Lipman , Mike Milano , David D. Ward , James Guichard , Leonid Sandler , Moshe Kravchik , Alena Lifar , Darrin Miller
Abstract: Various systems and methods for determining whether to allow or continue to allow access to a protected data asset are disclosed herein. For example, one method involves receiving a request to access a protected data asset, wherein the request is received from a first user device; determining whether to grant access to the protected data asset, wherein the determining comprises evaluating one or more criteria associated with the first user device, and the criteria comprises first information associated with a first policy constraint; and in response to a determination that access to the protected data asset is to be granted, granting access to the protected data asset.
-
公开(公告)号:US20150215819A1
公开(公告)日:2015-07-30
申请号:US14162954
申请日:2014-01-24
Applicant: Cisco Technology, Inc.
Inventor: Hendrikus G.P. Bosch , Peter Weinberger , Praveen Bhagwatula , Michael E. Lipman , Alessandro Duminuco , Louis Gwyn Samuel
IPC: H04W28/08 , H04L12/721 , H04L12/743 , H04W24/04 , H04L12/707
Abstract: Presented herein are techniques to reduce the number of redirected subscriber packet flows while performing sticky hierarchical load balancing. An Nth head end network element may be activated such that a plurality of N head end network elements are active and capable of receiving and processing one or more packet flows. A primary load balancer may then be directed to overwrite a portion of pointers of a hash table in an evenly distributed manner with pointers to the Nth head end network element such that packet flows are forwarded to the Nth head end network element, wherein the hash table retains a static number of entries as the number of head end network elements is modified.
Abstract translation: 这里提出的是在执行粘性分层负载平衡的同时减少重定向用户分组流的数量的技术。 可以激活第N个头端网元,使得多个N个头端网元是活动的并且能够接收和处理一个或多个分组流。 然后可以引导主要负载平衡器以均匀分布的方式用指针覆盖散列表的指针的一部分,使得分组流被转发到第N个头端网元,其中散列表 随着头端网元数量的修改,保留了静态数量的条目。
-
公开(公告)号:US20170237747A1
公开(公告)日:2017-08-17
申请号:US15387123
申请日:2016-12-21
Applicant: Cisco Technology, Inc.
Inventor: Paul Quinn , Michael E. Lipman , Mike Milano , David D. Ward , James Guichard , Leonid Sandler , Moshe Kravchik , Alena Lifar , Darrin Miller
CPC classification number: H04L63/107 , G06F21/602 , G06F21/6218 , H04L63/0428 , H04L63/108 , H04L63/20 , H04W12/00503 , H04W12/08
Abstract: Various systems and methods for determining whether to allow or continue to allow access to a protected data asset are disclosed herein. For example, one method involves receiving a request to access a protected data asset, wherein the request is received from a first user device; determining whether to grant access to the protected data asset, wherein the determining comprises evaluating one or more criteria associated with the first user device, and the criteria comprises first information associated with a first policy constraint; and in response to a determination that access to the protected data asset is to be granted, granting access to the protected data asset.
-
公开(公告)号:US20140379938A1
公开(公告)日:2014-12-25
申请号:US13923257
申请日:2013-06-20
Applicant: CISCO TECHNOLOGY, INC.
Inventor: Hendrikus G. P. Bosch , David Richard Barach , Michael E. Lipman , Alessandro Duminuco , James N. Guichard , Humberto J. La Roche
IPC: H04L12/803
CPC classification number: H04L47/125
Abstract: An example method for load balancing in a network environment is provided and includes receiving a packet from a first stage load-balancer in a network environment, where the packet is forwarded from the first stage load-balancer to one of a plurality of second stage load-balancers in the network according to a hash based forwarding scheme, and routing the packet from the second stage load-balancer to one of a plurality of servers in the network according to a per-session routing scheme. The per-session routing scheme includes retrieving a session routing state from a distributed hash table in the network. In a specific embodiment, the hash based forwarding scheme includes equal cost multi path routing. The session routing state can include an association between a next hop for the packet and the packet's 5-tuple representing a session to which the packet belongs.
Abstract translation: 提供了一种用于在网络环境中进行负载平衡的示例性方法,并且包括在网络环境中从第一级负载平衡器接收分组,其中分组从第一级负载平衡器转发到多个第二级负载 根据基于散列的转发方案在网络中平衡器,并且根据每会话路由方案将分组从第二阶段负载平衡器路由到网络中的多个服务器之一。 每会话路由方案包括从网络中的分布式哈希表检索会话路由状态。 在具体实施例中,基于散列的转发方案包括相同成本的多路径路由。 会话路由状态可以包括分组的下一跳与分组所属的会话的分组的5元组之间的关联。
-
-
-
-
-