公开(公告)号：US20210067603A1

公开(公告)日：2021-03-04

申请号：US17097389

申请日：2020-11-13

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L29/08 ,  G06F9/48

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US11330076B2

公开(公告)日：2022-05-10

申请号：US17097389

申请日：2020-11-13

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L29/08 ,  H04L67/60 ,  G06F9/48 ,  H04L67/10

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US11722411B2

公开(公告)日：2023-08-08

申请号：US17529081

申请日：2021-11-17

Applicant: Palantir Technologies Inc.

Inventor： Steven Austin ,  Matthew Williamson

IPC: H04L45/745 ,  H04L61/2592

CPC classification number: H04L45/745 ,  H04L61/2592

Abstract: System and method for isolating network traffic of multiple users across a network of a computing platform. For example, a method includes receiving data at a networking device of a computing platform. The networking device includes a plurality of routing tables. Each routing table of the plurality of routing tables is associated with a different user of multiple users of the computing platform. A user of the multiple users is identified based at least in part on the received data. In response to identifying the user of the multiple users based at least in part on the received data, a routing table of the plurality of routing tables is identified based at least in part on the identified user. A route from the identified routing table is determined based at least in part on the received data. The received data is sent across a network of the computing platform according to the determined route. The method is performed using one or more processors.

公开(公告)号：US20200259923A1

公开(公告)日：2020-08-13

申请号：US16545073

申请日：2019-08-20

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L29/08 ,  G06F9/48

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US11943319B2

公开(公告)日：2024-03-26

申请号：US18140918

申请日：2023-04-28

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L67/60 ,  G06F9/48 ,  H04L67/10

CPC classification number: H04L67/60 ,  G06F9/4881 ,  H04L67/10

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US20230336481A1

公开(公告)日：2023-10-19

申请号：US18210966

申请日：2023-06-16

Applicant: Palantir Technologies Inc.

Inventor： Steven Austin ,  Matthew Williamson

IPC: H04L45/745 ,  H04L61/2592

CPC classification number: H04L45/745 ,  H04L61/2592

Abstract: System and method for isolating network traffic of multiple users across a network of a computing platform. For example, a method includes receiving data at a networking device of a computing platform. The networking device includes a plurality of routing tables. Each routing table of the plurality of routing tables is associated with a different user of multiple users of the computing platform. A user of the multiple users is identified based at least in part on the received data. In response to identifying the user of the multiple users based at least in part on the received data, a routing table of the plurality of routing tables is identified based at least in part on the identified user. A route from the identified routing table is determined based at least in part on the received data. The received data is sent across a network of the computing platform according to the determined route. The method is performed using one or more processors.

公开(公告)号：US20230269307A1

公开(公告)日：2023-08-24

申请号：US18140918

申请日：2023-04-28

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L67/60 ,  G06F9/48 ,  H04L67/10

CPC classification number: H04L67/60 ,  G06F9/4881 ,  H04L67/10

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US11683394B2

公开(公告)日：2023-06-20

申请号：US17714722

申请日：2022-04-06

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L67/60 ,  G06F9/48 ,  H04L67/10

CPC classification number: H04L67/60 ,  G06F9/4881 ,  H04L67/10

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US20220232098A1

公开(公告)日：2022-07-21

申请号：US17714722

申请日：2022-04-06

Applicant: Palantir Technologies Inc.

Inventor： Greg DeArment ,  Divyanshu Arora ,  Jason Hoch ,  Mark Elliot ,  Matthew Williamson ,  Robert Kruszewski ,  Steven Austin

IPC: H04L67/60 ,  G06F9/48 ,  H04L67/10

Abstract: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

公开(公告)号：US20220078115A1

公开(公告)日：2022-03-10

申请号：US17529081

申请日：2021-11-17

Applicant: Palantir Technologies Inc.

Inventor： Steven Austin ,  Matthew Williamson

IPC: H04L12/741 ,  H04L29/12

Abstract: System and method for isolating network traffic of multiple users across a network of a computing platform. For example, a method includes receiving data at a networking device of a computing platform. The networking device includes a plurality of routing tables. Each routing table of the plurality of routing tables is associated with a different user of multiple users of the computing platform. A user of the multiple users is identified based at least in part on the received data. In response to identifying the user of the multiple users based at least in part on the received data, a routing table of the plurality of routing tables is identified based at least in part on the identified user. A route from the identified routing table is determined based at least in part on the received data. The received data is sent across a network of the computing platform according to the determined route. The method is performed using one or more processors.