公开(公告)号：US09967210B2

公开(公告)日：2018-05-08

申请号：US14944113

申请日：2015-11-17

Applicant: Juniper Networks, Inc.

Inventor： Scott Mackie ,  Andrzej Szyszko ,  Nitin Kumar ,  Timothy L Patrick ,  Surya Chandra Sekhar Nimmagadda

IPC: H04L12/935 ,  H04L12/721 ,  H04L12/28 ,  H04L12/54 ,  H04L12/66 ,  H04L12/24

CPC classification number: H04L49/30 ,  H04L12/28 ,  H04L12/56 ,  H04L12/66 ,  H04L41/0803 ,  H04L45/72

Abstract: In some examples, a network device comprises a first application and a second application; a forwarding unit comprising an interface card to receive a packet; a packet processor; an internal forwarding path of the forwarding unit; a forwarding unit processor; a first interface; and a second interface. The first application is configured to configure, via the first interface, the internal forwarding path to include a sandbox that comprises a container for instructions to be configured inline within the internal forwarding path. The second application is configured to configure, via the second interface, the sandbox with second instructions that determine processing of packets within the sandbox. The packet processor is configured to process, in response to determining a packet received by the forwarding unit is associated with a packet flow controlled at least in part by the second application, the packet by executing the second instructions configured for the sandbox.

公开(公告)号：US20170142031A1

公开(公告)日：2017-05-18

申请号：US14944113

申请日：2015-11-17

Applicant: Juniper Networks, Inc.

Inventor： Scott Mackie ,  Andrzej Szyszko ,  Nitin Kumar ,  Timothy L Patrick ,  Surya Chandra Sekhar Nimmagadda

IPC: H04L12/935 ,  H04L12/721

CPC classification number: H04L49/30 ,  H04L12/28 ,  H04L12/56 ,  H04L12/66 ,  H04L41/0803 ,  H04L45/72

Abstract: In some examples, a network device comprises a first application and a second application; a forwarding unit comprising an interface card to receive a packet; a packet processor; an internal forwarding path of the forwarding unit; a forwarding unit processor; a first interface; and a second interface. The first application is configured to configure, via the first interface, the internal forwarding path to include a sandbox that comprises a container for instructions to be configured inline within the internal forwarding path. The second application is configured to configure, via the second interface, the sandbox with second instructions that determine processing of packets within the sandbox. The packet processor is configured to process, in response to determining a packet received by the forwarding unit is associated with a packet flow controlled at least in part by the second application, the packet by executing the second instructions configured for the sandbox.