CLUSTER-WIDE CONTAINER OPTIMIZATION AND STORAGE COMPRESSION

    公开(公告)号:US20180267990A1

    公开(公告)日:2018-09-20

    申请号:US15461291

    申请日:2017-03-16

    Abstract: One embodiment includes identifying a common file associated with a first software container deployed on a host; adding a single copy of the common file to a common file pool maintained by the host, removing the common file from the first container and replacing it with a pointer to the copy of the common file in the shared file pool, and removing the common file from the first container and replacing it with a pointer to the copy of the common file in the shared file pool; identifying at least one unique file associated with the first container; and moving the unique file to the common file pool maintained by the host and removing the unique file from the first container and replacing it with a pointer to the copy of the unique file in the shared file pool.

    Providing differentiated network services and priorities to VPN routers/clients
    2.
    发明授权
    Providing differentiated network services and priorities to VPN routers/clients 有权
    为VPN路由器/客户端提供差异化​​的网络服务和优先级

    公开(公告)号:US09210223B2

    公开(公告)日:2015-12-08

    申请号:US14466972

    申请日:2014-08-23

    Abstract: In one embodiment, a first network device receives a priority message from a second network device, wherein the priority message conforms to a connection establishment protocol and indicates a priority associated with the second network device. The first network device obtains the priority from the priority message and stores the priority. The first network device allocates resources for at least one of control or data plane processing to the second network device in accordance with the priority.

    Abstract translation: 在一个实施例中,第一网络设备从第二网络设备接收优先级消息,其中优先级消息符合连接建立协议并且指示与第二网络设备相关联的优先级。 第一网络设备从优先级消息获取优先级并存储优先级。 第一网络设备根据优先级向第二网络设备分配至少一个控制或数据平面处理的资源。

    Cluster-wide container optimization and storage compression

    公开(公告)号:US10936549B2

    公开(公告)日:2021-03-02

    申请号:US15461291

    申请日:2017-03-16

    Abstract: One embodiment includes identifying a common file associated with a first software container deployed on a host; adding a single copy of the common file to a common file pool maintained by the host, removing the common file from the first container and replacing it with a pointer to the copy of the common file in the shared file pool, and removing the common file from the first container and replacing it with a pointer to the copy of the common file in the shared file pool; identifying at least one unique file associated with the first container; and moving the unique file to the common file pool maintained by the host and removing the unique file from the first container and replacing it with a pointer to the copy of the unique file in the shared file pool.

    ADAPTIVE LOAD BALANCING FOR APPLICATION CHAINS

    公开(公告)号:US20180167450A1

    公开(公告)日:2018-06-14

    申请号:US15374504

    申请日:2016-12-09

    Abstract: Disclosed are systems, methods, and computer-readable storage media for adaptive load balancing for application chains. A load-balancer can receive a data packet for a connection/transaction to be routed through an application chain. The load-balancer can select, based on an application path table, a first end-to-end application path through the application chain. The application path table can identify two or more end-to-end application paths through the application chain along with a corresponding performance status for each end-to-end application path through the application chain. The performance status for an application path can indicate a performance level of the end-to-end application path determined based on performance of previous data packets for previous connections transmitted through the application chain according to the end-to-end application path. The load-balancer can then route the data packet through the application chain according to the first end-to-end application path and across multiple tiers.

    System and method for secure cloud service delivery with prioritized services in a network environment
    5.
    发明授权
    System and method for secure cloud service delivery with prioritized services in a network environment 有权
    用于在网络环境中优先化服务的安全云服务传送的系统和方法

    公开(公告)号:US09444789B2

    公开(公告)日:2016-09-13

    申请号:US14470497

    申请日:2014-08-27

    CPC classification number: H04L63/0272 H04L9/0838 H04L41/0803 H04L67/1002

    Abstract: An example method includes receiving a request for a cloud capability set during an Internet Key Exchange negotiation associated with a virtual private network (VPN) tunnel between a subscriber and a cloud, wherein the cloud capability set comprises one or more cloud capabilities, mapping the request to one or more cryptographic modules that can support the cloud capability set, and offloading the VPN tunnel to the one or more cryptographic modules. The request can be an Internet Security Association and Key Management Protocol (ISAKMP) packet listing the one or more cloud capabilities in a private payload. The method may further include splitting the VPN tunnel between the cryptographic modules if no single cryptographic module can support substantially all the cloud capabilities in the cloud capability set. In some embodiments, the request is compared with a service catalog comprising authorized cloud capabilities.

    Abstract translation: 示例性方法包括在与订户和云之间的虚拟专用网(VPN)隧道相关联的因特网密钥交换协商期间接收对云能力集的请求,其中所述云能力集合包括一个或多个云能力,映射请求 到一个或多个可以支持云能力集合的加密模块,以及将VPN隧道卸载到一个或多个加密模块。 该请求可以是列出私有有效载荷中的一个或多个云能力的因特网安全关联和密钥管理协议(ISAKMP)分组。 该方法还可以包括在加密模块之间分割VPN隧道,如果没有单个密码模块可以支持云能力集中的实质上所有的云能力。 在一些实施例中,该请求与包括授权云能力的服务目录进行比较。

    PATH SELECTION IN A MULTI-SERVICE AND MULTI-TENANT SECURE CLOUD ENVIRONMENT
    7.
    发明申请
    PATH SELECTION IN A MULTI-SERVICE AND MULTI-TENANT SECURE CLOUD ENVIRONMENT 有权
    多服务和多重安全云环境中的路径选择

    公开(公告)号:US20150143501A1

    公开(公告)日:2015-05-21

    申请号:US14084378

    申请日:2013-11-19

    Abstract: A device and method are provided to provide multi-exit firewall capabilities for cloud server or cloud service deployments without prior knowledge of reachability information of a client device where the client device may belong to one of several networks accessing the cloud server or cloud service. The reachability information may be derived based on flow of data to and from the client device in response to a data transfer initiation request. A firewall connection table may be updated to record routability to the client device comprising the derived reachability information. The recorded reachability information in the connection table may be used for the data transfer with the client device instead of a default route in a routing table.

    Abstract translation: 提供了一种设备和方法,用于为云服务器或云服务部署提供多出口防火墙功能,而无需事先了解客户端设备的可达性信息,客户端设备可能属于接入云服务器或云服务的多个网络之一。 可访问性信息可以基于响应于数据传送发起请求的客户端设备的数据流而导出。 可以更新防火墙连接表以记录包括导出的可达性信息的客户端设备的可路由性。 连接表中记录的可达性信息可以用于与客户端设备的数据传输而不是路由表中的默认路由。

    SYSTEM AND METHOD FOR SECURE CLOUD SERVICE DELIVERY WITH PRIORITIZED SERVICES IN A NETWORK ENVIRONMENT
    8.
    发明申请
    SYSTEM AND METHOD FOR SECURE CLOUD SERVICE DELIVERY WITH PRIORITIZED SERVICES IN A NETWORK ENVIRONMENT 审中-公开
    系统和方法,用于在网络环境中安全优先服务提供的云服务

    公开(公告)号:US20140372761A1

    公开(公告)日:2014-12-18

    申请号:US14470497

    申请日:2014-08-27

    CPC classification number: H04L63/0272 H04L9/0838 H04L41/0803 H04L67/1002

    Abstract: An example method includes receiving a request for a cloud capability set during an Internet Key Exchange negotiation associated with a virtual private network (VPN) tunnel between a subscriber and a cloud, wherein the cloud capability set comprises one or more cloud capabilities, mapping the request to one or more cryptographic modules that can support the cloud capability set, and offloading the VPN tunnel to the one or more cryptographic modules. The request can be an Internet Security Association and Key Management Protocol (ISAKMP) packet listing the one or more cloud capabilities in a private payload. The method may further include splitting the VPN tunnel between the cryptographic modules if no single cryptographic module can support substantially all the cloud capabilities in the cloud capability set. In some embodiments, the request is compared with a service catalog comprising authorized cloud capabilities.

    Abstract translation: 示例性方法包括在与订户和云之间的虚拟专用网(VPN)隧道相关联的因特网密钥交换协商期间接收对云能力集的请求,其中所述云能力集合包括一个或多个云能力,映射请求 到一个或多个可以支持云能力集合的加密模块,以及将VPN隧道卸载到一个或多个加密模块。 该请求可以是列出私有有效载荷中的一个或多个云能力的因特网安全关联和密钥管理协议(ISAKMP)分组。 该方法还可以包括在加密模块之间分割VPN隧道,如果没有单个密码模块可以支持云能力集中的实质上所有的云能力。 在一些实施例中,该请求与包括授权云能力的服务目录进行比较。

    Adaptive load balancing for application chains

    公开(公告)号:US10523568B2

    公开(公告)日:2019-12-31

    申请号:US15374504

    申请日:2016-12-09

    Abstract: Disclosed are systems, methods, and computer-readable storage media for adaptive load balancing for application chains. A load-balancer can receive a data packet for a connection/transaction to be routed through an application chain. The load-balancer can select, based on an application path table, a first end-to-end application path through the application chain. The application path table can identify two or more end-to-end application paths through the application chain along with a corresponding performance status for each end-to-end application path through the application chain. The performance status for an application path can indicate a performance level of the end-to-end application path determined based on performance of previous data packets for previous connections transmitted through the application chain according to the end-to-end application path. The load-balancer can then route the data packet through the application chain according to the first end-to-end application path and across multiple tiers.

Patent Agency Ranking