137 results about "High performance network" patented technology

One implementation of a method reassembles complete client-server conversation streams, applies decoders and/or decompressors, and analyzes the resulting data stream using multi-dimensional content profiling and/or weighted keyword-in-context. The method may detect the extrusion of the data, for example, even if the data has been modified from its original form and/or document type. The decoders may also uncover hidden transport mechanisms such as, for example, e-mail attachments. The method may further detect unauthorized (e.g., rogue) encrypted sessions and stop data transfers deemed malicious. The method allows, for example, for building 2 Gbps (Full-Duplex)-capable extrusion prevention machines.

The present invention provides a high-performance network switch. A digital switch has a plurality of blades coupled to a switching fabric via serial pipes. Serial link technology is used in the switching fabric. Each blade outputs serial data streams with in-band control information in multiple stripes to the switching fabric. The switching fabric includes a plurality of cross points corresponding to the multiple stripes. In one embodiment five stripes and five cross points are used. Each blade has a backplane interface adapter (BIA). One or more integrated bus translators (IBTs) and/or source packet processors are coupled to a BIA. An encoding scheme for packets of data carried in wide striped cells is provided.

A backplane interface adapter with error control and redundant fabric for a high-performance network switch. The error control may be provided by an administrative module that includes a level monitor, a stripe synchronization error detector, a flow controller, and a control character presence tracker. The redundant fabric transceiver of the backplane interface adapter improves the adapter's ability to properly and consistently receive receive narrow input cells carrying packets of data and output wide striped cells to a switching fabric.

A network communication device for bi-directional communication networks is provided having a first portion and a second portion. The first portion is connectable to a first point and a second point on the bi-directional communication network. Similarly, the second portion is connectable to the first and second points. The first portion manages collisions among a first set of messages transmittable from the first point to the second point. However, the second portion transmits free of collision management a second set of messages transmittable from the second point to the first point.

A cross-domain network resource reservation scheduler configured to schedule a path from at least one end-site includes a management plane device configured to monitor and provide information representing at least one of functionality, performance, faults, and fault recovery associated with a network resource; a control plane device configured to at least one of schedule the network resource, provision local area network quality of service, provision local area network bandwidth, and provision wide area network bandwidth; and a service plane device configured to interface with the control plane device to reserve the network resource based on a reservation request and the information from the management plane device. Corresponding methods and computer-readable medium are also disclosed.

Systems, methods, and apparatus are provided for vulnerability signature based Network Intrusion Detection and/or Prevention which achieves high throughput comparable to that of the state-of-the-art regex-based systems while offering improved accuracy. A candidate selection algorithm efficiently matches thousands of vulnerability signatures simultaneously using a small amount of memory. A parsing transition state machine achieves fast protocol parsing. Certain examples provide a computer-implemented method for network intrusion detection. The method includes capturing a data message and invoking a protocol parser to parse the data message. The method also includes matching the parsed data message against a plurality of vulnerability signatures in parallel using a candidate selection algorithm and detecting an unwanted network intrusion based on an outcome of the matching.

The invention relates to a method for constructing a verification and test platform of network chip module level functions, comprising the construction of a simulation and reference model of the tested modules, which is characterized in that: the method comprises the construction of all modules and documents; the output of an excitation generating model is connected with the inputs of the tested module and the simulation and reference model, a clock and a reset generating module are connected with the tested module and the clock and reset signal of the simulation and reference model, a register initialization module is connected with the register of the tested module and the simulation and reference model, and a CPU simulation module is connected with the CPU of the tested module; the output of the tested module is connected with the simulation and reference model, thus, the network chip module level function verification and test platform can be constructed. The invention has the advantages that the platform can be constructed easily and directly, so the time required to construct the module level function verification and test platform can be shortened greatly in the high performance network chip verification process; meanwhile, the platform constructed by the method has clear structure which is easy to be understood and has improved reliability.

A high-speed system for processing a packet and routing the packet to a packet destination port, the system comprising: (a) a memory block for storing tabulated entries, (b) a parsing subsystem containing at least one microcode machine for parsing the packet, thereby obtaining at least one search key, (c) a searching subsystem containing at least one microcode machine for searching for a match between said at least one search key and said tabulated entries, (d) a resolution subsystem containing at least one microcode machine for resolving the packet destination port, and (e) a modification subsystem containing at least one microcode machine for making requisite modifications to the packet; wherein at least one of said microcode machines is a customized microcode machine.

A high performance network address processor is provided comprising a longest prefix match lookup engine for receiving a request for data from a designated network destination address. An associated data engine is also provided to couple to the longest prefix match lookup engine for receiving a longest prefix match lookup engine output address from the longest prefix match lookup engine and providing a network address processor data output corresponding to the designated network destination address requested. The high performance network address processor longest prefix match lookup engine comprises a plurality of pipelined lookup tables. Each table provides an index to a given row within the next higher stage lookup table, wherein the last stage, or the last table, in the set of tables comprises an associated data pointer provided as input to the associated data engine. The associated data engine also comprising one or more tables, the associated data engine generating a designated data output associated with the designated network address provided to the high performance NAP.

A networking system, method, and device is provided for improving network communication performance between client sites at a distance from one another such that would usually require long haul network communication. The networking system includes at least one network bonding/aggregation computer system for bonding or aggregating one or more diverse network connections so as to configure a bonded/aggregated connection that has increased throughput; and at least one network server component implemented at an access point to a high performing network. Data traffic is carried over the bonded/aggregated connection. The network server component automatically terminates the bonded/aggregated connection and passes the data traffic to the network backbone, while providing a managed network path that incorporates both the bonded/aggregated connection and a network path carried over the high performing network, and thereby providing improved performance in long haul network connections.

Systems and methods of building massively parallel computing systems using low power computing complexes in accordance with embodiments of the invention are disclosed. A massively parallel computing system in accordance with one embodiment of the invention includes at least one Solid State Blade configured to communicate via a high performance network fabric. In addition, each Solid State Blade includes a processor configured to communicate with a plurality of low power computing complexes interconnected by a router, and each low power computing complex includes at least one general processing core, an accelerator, an I/O interface, and cache memory and is configured to communicate with non-volatile solid state memory.

Network interconnection apparatus and method capable of efficiently guaranteeing optimum QoS suited to the status of actual traffic and network, whereby high-performance network interconnection is achieved without entailing lost calls. Routing information managing means manages routing information of an ATM network, and statistical information managing means manages statistical information on the traffic of a LAN. QoS setting means sets QoS which the ATM network ought to guarantee, based on the statistical information, and QoS guarantee determining means determines based on the routing information whether or not the set QoS can be guaranteed. If it is judged that the QoS cannot be guaranteed, QoS adjusting means adjusts the QoS so that the QoS can be guaranteed. Call connection control means connects call according to the QoS which can be guaranteed.

The invention relates to a rapid network packet classification method based on network traffic statistic information, which belongs to the technical field of filtration and monitoring of network traffic. The method comprises the steps of: determining the space partition of various domains of a header and a rule mapping table thereof according to a classification rule set, and establishing an address lookup table, a port lookup table and a rule lookup table; recording the times that the header of a network packet appears in the space partition of the domains and calculating prior distribution; establishing a letter search tree of the domains according to the prior distribution; performing continuous matching on the received header of the network packet according to the letter search tree and the lookup tables; and re-calculating the prior distribution and updating the letter search tree at update time, and continuing to match the received network traffic. The method uses the classification rule set and heuristic information of the network traffic from two different levels of network packet classification, strengthens the adaptability of the classification method, and improves average classification efficiency. The method has quick lookup speed and strong adaptability, can be realized on a plurality of platforms, and is applicable to the filtration and monitoring of high-performance network traffic.

Computer games deployed over communications networks such as the Internet are arranged with graphics rendering services to effect a real-time, automated fast rendering facility responsive to requests generated in view of game execution state. High-performance graphics authoring tools are used to produce graphics elements in agreement with a particular game design and scenario specification ‘on-the-fly’. These graphics are uploaded and stored in a database having a cooperating prescribed schema. A media player executing game logic is coupled to a render manager whereby render requests are passed thereto. The render manager forms scene files to be processed at a rendering application and finally to an assembler which converts all rendered graphics to a form usable at the media player. In this way, very high-quality real-time automated graphics generation is provided for bandwidth and memory limited platforms such as user workstations coupled to the Internet.

The invention discloses a high performance network tester and a testing method of the high performance network tester with the adoption of a FPGA+PowerPC+ARM framework. The network tester comprises a RJ45 interface, a transformer, a physical interface (PHY), an optical interface SFP, an FPGA, a PowerPC, an ARM and a display control device. The FPGA completes the generation and reception of testing flows, conducts analysis of a first layer message and a second layer message, controls the FPGA and surveys the first layer message and the second layer message; the PowerPC conducts analysis of a network protocol on a third layer or layers above; the ARM communicates with a computer to realize the display and control of entire equipment. According to the invention, the network tester puts together the advantages of three processors. The network tester is provided with high flexibility and is cost-effective to make. The tester is also compatible with a variety of interfaces and has strong expansibility.

A high-performance network switch chassis has multiple network ports and air openings on the front end of the chassis, and multiple fan modules mounted on the back end of the chassis. The fan modules are hot-swap replaceable so that replacement of one of the fan modules does not require interruption of network switch operation. Air-blockers associated with each fan module prevent recirculation of air when fan modules are removed. Different types of fan modules may be used to provide either front-to-rear or rear-to-front airflow through the chassis. A fan speed controller determines fan speed based on temperature using one of two profiles. The two profiles correspond to the two different airflow directions.

One embodiment relates to a network gateway apparatus configured for high-performance network content processing. The apparatus includes data storage configured to store computer-readable code and data, and a processor configured to execute computer-readable code and to access said data storage. Computer-readable code implements a plurality of packet processors, each packet processor being configured with different processing logic. Computer-readable code further implements a packet handler which is configured to send incoming packets in parallel to the plurality of packet processors. Another embodiment relates to a method for high-performance network content processing. Other embodiments, aspects and features are also disclosed.

The invention provides a dynamic extensible method for increasing virtual machine resources. An internal storage index client side (1), an internal storage service program (2), an internal storage node pool (3), a storage client side (4), a storage service program (5) and a storage pool (6) are integrated with the high-performance network as a core so that the requirements for dynamically increasing internal storage, storage resources and dynamic transferring of a virtual machine can be met by a system, the internal storage service program can change the internal storage space provided by an internal storage server cluster to be the internal storage pool in a virtual mode, internal storage nodes can be dynamically divided according to the request of the internal storage index client side, and when an unoccupied adjacent internal storage node exists, the internal storage nodes can be combined to meet the dynamic internal storage demands of different client sides. The internal storage service program can operate in a cluster mode, and under a cluster mode, the internal storage pool also needs to record internal storage nodes managed by other internal service programs, and accordingly the client sides can select services from the internal storage service program with many unoccupied internal storage nodes or with a small load.

The invention discloses a multilink aggregation control device for a cloud computing network. The multilink aggregation control device comprises a plurality of gateways connected with an external network and an internal network of the cloud computing network. The device is characterized by also comprising a link aggregation control unit which is used for adjusting a network load flow direction list and a gateway external network address list so as to realize dynamic dispatching of the number of access loads on different access links. According to the multilink dynamic aggregation technology, the access cost of a high-performance network can be effectively reduced, the efficiency of an access link can be improved, and the multilink aggregation control device has the advantages of strong transplantation, high stability and remarkable effect.

The present invention discloses a scheduling method for virtual processors based on the affinity of NUMA high-performance network buffer resources, including: in a NUMA architecture, when a network interface card of a virtual machine is started, getting distribution of the buffer of the network interface card on each NUMA node; getting affinities of each NUMA node for the buffer of the network interface card on the basis of an affinity relationship between each NUMA node; determining a target NUMA node in combination with the distribution of the buffer of the network interface card on each NUMA node and affinities of each NUMA node for the buffer of the network interface card; scheduling the virtual processor to the CPU on the target NUMA node. The present invention solves the problem that the affinity between the VCPU of the virtual machine and the buffer of the network interface card is not optimal in the NUMA architecture, so that the speed of VCPU processing network packets is not high.

The invention relates to the technical field of networks, in particular to a high performance data message capture method and device based on Linux. The method comprises the steps that a data message capture program is notified to process a trigger signal in an interruption mode according to the trigger signal; the trigger signal is shielded if network flow is large, and a network card is initiatively polled on whether a data message is received; if the data message is received, the data message of the network card is synchronized to kernel memory; if the network flow is small, correspondence to the trigger signal is performed, and the data message of the network card is synchronized to the kernel memory; a data message storage address in the kernel memory is obtained, and the storage starting address of the data message is mapped to user virtual address space through the memory mapping function mmap. Kernel interrupt processing is reduced through a semi-polling method, a path for transmitting the data message of the network card is changed, copy frequency of the data message is reduced through the memory mapping function mmap, high performance network sniffing is conducted under the gigabit and 10 gigabit environment, packet loss rate is reduced, and CPU occupation rate is reduced.