知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

7 records (took 0.041 seconds)

    PACKET STEERING TO A HOST-BASED FIREWALL IN VIRTUALIZED ENVIRONMENTS
    1.
    发明申请
    PACKET STEERING TO A HOST-BASED FIREWALL IN VIRTUALIZED ENVIRONMENTS 有权

    公开(公告)号：US20220303246A1

    公开(公告)日：2022-09-22

    申请号：US16652643

    申请日：2020-02-27

    Applicant: Juniper Networks, Inc.

    Inventor： Prasad Miriyala ,  Aniket G. Daptari ,  Fei Chen ,  Pranavadatta D N ,  Kiran K N ,  Jeffrey S. Marshall ,  Prakash T. Seshadri

    IPC: H04L9/40 ,  H04L41/0894 ,  H04L12/46 ,  H04L45/76 ,  G06F9/455

    Abstract: Techniques are disclosed for redirecting network traffic of virtualized application workload to a host-based firewall. For example, a system comprises a software defined networking (SDN) controller of a multi-tenant virtualized data center configured to: receive a security policy expressed as one or more tags to redirect traffic of a virtualized application workload to a host-based firewall (HBF) of the multi-tenant virtualized data center; configure network connectivity to the HBF in accordance with the security policy; a security controller that manages the HBF configured to: obtain the one or more tags from the SDN controller; receive one or more firewall policies expressed in terms of the one or more tags, wherein each of the one or more firewall policies specifies a function of the HBF; and configure the function of the HBF in accordance with the one or more firewall policies.

    Scalable port range management for security policies
    2.
    发明授权
    Scalable port range management for security policies 有权

    公开(公告)号：US11418546B1

    公开(公告)日：2022-08-16

    申请号：US17009631

    申请日：2020-09-01

    Applicant: Juniper Networks, Inc.

    Inventor： Prasad Miriyala ,  Aniket G. Daptari

    IPC: H04L29/06 ,  H04L9/40

    Abstract: Techniques are disclosed for implementing scalable port range policies across a plurality of categories that support application workloads. In one example, a policy agent receives, from a centralized controller for a computer network, a plurality of policies. Each policy of the plurality of policies includes one or more policy rules, and each of the one or more policy rules specifies one or more tags specifying one or more dimensions for application workloads executed by the one or more computing devices and a corresponding port range. The policy agent assigns, based on a policy rule, a port range specified by the policy rule to objects of the one or more computing devices that belong to categories described by the one or more dimensions of the one or more tags of the policy rule. The categories support the application workloads and are assigned to the tags by a centralized controller.

    Using multidimensional metadata tag sets to determine resource allocation in a distributed computing environment
    3.
    发明授权
    Using multidimensional metadata tag sets to determine resource allocation in a distributed computing environment 有权

    公开(公告)号：US11216309B2

    公开(公告)日：2022-01-04

    申请号：US16444971

    申请日：2019-06-18

    Applicant: Juniper Networks, Inc.

    Inventor： Charles Arthur Piercey ,  Aniket G. Daptari ,  Prasad Miriyala ,  Erwin Daria ,  William Stuart Mackie

    IPC: G06F9/455 ,  G06F9/50

    Abstract: An example method includes receiving a resource request for at least one compute and/or storage resource from a distributed computing system distributed among multiple data centers, determining a resource policy that is associated with the resource request, wherein the resource policy includes a rule specifying at least one metadata tag and at least one criterion associated with the at least one metadata tag, identifying at least one object included in a resource object model that complies with the rule of the resource policy, wherein the at least one object has an assigned value for the metadata tag that satisfies the at least one criterion, selecting a data center that is associated with the at least one object identified from the resource object model, and deploying, on the selected data center, the at least one compute or storage resource.

    Scalable port range management for security policies
    6.
    发明授权
    Scalable port range management for security policies 有权

    公开(公告)号：US10778724B1

    公开(公告)日：2020-09-15

    申请号：US16023978

    申请日：2018-06-29

    Applicant: Juniper Networks, Inc.

    Inventor： Prasad Miriyala ,  Aniket G. Daptari

    IPC: H04L29/06

    Abstract: Techniques are disclosed for implementing scalable port range policies across a plurality of categories that support application workloads. In one example, a policy agent receives, from a centralized controller for a computer network, a plurality of policies. Each policy of the plurality of policies includes one or more policy rules, and each of the one or more policy rules specifies one or more tags specifying one or more dimensions for application workloads executed by the one or more computing devices and a corresponding port range. The policy agent assigns, based on a policy rule, a port range specified by the policy rule to objects of the one or more computing devices that belong to categories described by the one or more dimensions of the one or more tags of the policy rule. The categories support the application workloads and are assigned to the tags by a centralized controller.

Patent Agency Ranking