507 results about "Packet routing" patented technology

A method for routing and switching data packets from one or more incoming links to one or more outgoing links of a router. The method comprises receiving a data packet from the incoming link, assigning at least one outgoing link to the data packet based on the destination address of the data packet, and after the assigning operation, storing the data packet in a switching memory based on the assigned outgoing link. The data packet extracted from the switching memory, and transmitted along the assigned outgoing link. The router may include a network processing unit having one or more systolic array pipelines for performing the assigning operation.

The invention in the preferred embodiment features a system (200) and method for automatically segregating harmful traffic from other traffic at a plurality of network nodes including switches and routers. In the preferred embodiment, the system (200) comprises an intrusion detection system (105) to determine the identity of an intruder and a server (130) adapted to automatically install an isolation rule on the one or more network nodes (114, 115, 116) to quarantine packets from the intruder. The isolation rule in the preferred embodiment is a virtual local area network (VLAN) rule or access control list (ACL) rule that causes the network node to route any packets from the intruder into a quarantine VLAN or otherwise isolate the traffic from other network traffic. In large networks, the isolation rule may be installed on a select plurality of network nodes under the gateway router (104) associated with the node at which the intruder first entered the network (100).

Packet routing via payload inspection at routers in a core of a distributed network. Packets include subjects and attributes in addition to routing information. The subjects correspond with particular types of content for subscriptions, and the attributes encapsulate the data or content. The routers store filters corresponding with subscriptions to content. Upon receiving a packet, a router inspects the payload section of the packet containing the attributes in order to retrieve the attributes and apply them to the filters for the subscriptions. If an attribute satisfies a filter, the packet is routed to the next link. If the attributes do not satisfy the filters, the router discards the packet. These routing decisions are distributed among routers in the network core. The router locally caches the data in the network core.

The invention solves the problem of overloading intermediate routers with state information as the number of multicast groups increases to millions of groups. The invention places multicast delivery tree information in the header of an encapsulated multicast packet, thereby relieving the routers from maintaining any state information about the multicast groups. The encapsulated packet is referred to as a small group multicast packet, or SGM packet. Routers which are neither branch points of the delivery tree nor destination routers will also need to do no additional forwarding processing other than that needed for standard unicast forwarding. A protocol designation field in the Layer 3 header informs the router that the packet is a SGM packet, and that the router is therefore instructed to parse the packet for route information. The router parses the SGM packet header and determines the next hop address of routers in the multicast delivery tree. The standard unicast forwarding tables are then consulted to determine the next packet destination addresses, and the router then rewrites the SGM packet and routes it to the next hop router. The routing tables also instruct the router as to which outbound port to route the packet.

A method for enabling co-existence of multiple machines with identical addresses within a single data center network. The method includes assigning a unique pseudo identifier to each machine in the network that can be used for routing a packet to a destination machine, replacing a sender media access control address on an address resolution protocol request with a pseudo identifier of the sender at an edge network switch, retrieving a private network identifier from a mapping table based on the sender pseudo identifier and returning a pseudo identifier for the destination address based on the private network identifier, and replacing the pseudo identifier of the destination address with an actual identifier at a destination edge network switch for routing the packet to the destination machine.

Additional routing information is added to a transaction packet without recalculating an ECRC by inserting the additional routing information at predetermined bit positions in the transaction packet known to have predetermined bit values. The modified transaction packet can then be routed using the additional routing information. The predetermined bit values can subsequently be reinstated at the predetermined bit positions in the packet.

Techniques for implementing a load balanced server system are described which may be used for effecting electronic commerce over a data network. The system comprises a load balancing system and a plurality of servers in communication with the load balancing system. Each of the plurality of servers may include a respective data cache for storing state information relating to client session transactions conducted between the server and a particular client. The load balancing system can be configured to select, using a load balancing protocol, an available first server from the plurality of servers to process an initial packet received from a source device such as, for example, a client machine of a customer. The load balancing system can also configured to route subsequent packets received from the source device to the first server. Before generating its response, the first server may verify that the state information relating to a specific client session stored in the data cache is up-to-date. If the first server determines that the state information stored in the data cache is not up-to-date, then the first server may be configured to retrieve the desired up-to-date state information from a database which is configured to store all state information relating to client sessions which have been initiated with the server system.

An Internet infrastructure with network devices and end point devices containing service module manager and service modules, that supports packet analysis, encapsulation and vectoring, and interleaving applications. The network device that supports packet content analysis on arriving packet, consists of a plurality of packet switched interface circuitries, user interface circuitry, local storage comprising the service module manager software and a plurality of local service modules, and processing circuitry communicatively coupled to each of the packet switched interfaces, local storage and user interface circuit. The processing circuitry executes service module manager and thus analyzes the packet content and applies one or more selected local service module processing using the packet. The processing circuitry thus takes one or more actions on the packet. A packet switching exchange that supports packet content analysis, encapsulation and vectoring on arriving packet, consisting a plurality of interconnecting switches, a plurality of line cards, general primary processing card. A client device that supports packet content analysis on arriving packet containing a plurality of network interfaces, user interface circuitry, local storage and processing circuitry communicatively coupled to each of the network interfaces, local storage and user interface circuitry.

The present invention provides methods, systems, and computer program instructions for providing location-independent packet routing and secure access in a wireless networking environment (such as that encountered within a building), enabling client devices to travel seamlessly within the environment. Each client device uses a constant address. An address translation process that is transparent to the client and server is automatically performed as the device roams through the environment, enabling efficient client migration from one supporting access point to another. The secure access techniques provide user-centric authentication and allow policy-driven packet filtering, while taking advantage of encryption capabilities that are built in to the hardware at each endpoint.

A network system includes: a first network; an authentication server; a second network; a network; and a packet forwarding apparatus, wherein the packet forwarding apparatus includes: a forwarding route table storage storing a first forwarding route table containing packet routing information to the second network, and a second forwarding route table containing packet routing information to the second network and the third network; and a forwarding route table selector that, prior to determination of successful authentication for the terminal apparatus, selects the first forwarding route table as a search forwarding route table, and that upon receipt of determination of successful authentication for the terminal apparatus, selects the second forwarding route table as the search forwarding route table.

A communications system that includes one or more free space electron switches. The free space electron switch employs an array of electron emitters, where each emitter is responsive to an RF or optical input signal on an input channel. Each emitter includes a cathode that emits electrons in response to the input signal. Each emitter further includes a focussing/accelerating electrode for collecting and accelerating the emitted electrons into an electron beam. Each emitter further includes an aiming anode that directs the beam of electrons to a desired detector within an array of detectors that converts the beam of electrons to a representative RF or optical signal on an output channel. Each emitter may include a modulating electrode that generates an electric field to modulate data onto the beam of electrons. The communications systems employing the switch can be an ISDN, DSLAM networks, packet routing systems, ADSL networks, PBX systems, local exchange systems, etc.

A type of network traffic associated with a packet received from a remote node of an access network is determined. A first interface logic routes the packet to a radio network controller (RNC) if the packet is received from an Internet protocol-basestation (IP-BTS) access network and destined to a packet core network. The RNC forwards the packet to a component of the packet core network. A second interface logic routes the packet to the component of the packet core network, including aggregating other packets of the same type received from other remote nodes, if the packet is received from a femto cell and destined to the packet core network. A breakout logic routes the packet to a destination of the Internet directly to enable the packet to reach the Internet without having to route the packet to the component of the packet core network, if the packet is destined to the Internet.