| Patent application number | Description | Published |
|---|
| 20100329275 | Multiple Processes Sharing a Single Infiniband Connection - A compute node with multiple transfer processes that share an Infiniband connection to send and receive messages across a network. Transfer processes are first associated with an Infiniband queue pair (QP) connection. Then send message commands associated with a transfer process are issued. This causes an Infiniband message to be generated and sent, via the QP connection, to a remote compute node corresponding to the QP. Send message commands associated with another process are also issued. This causes another Infiniband message to be generated and sent, via the same QP connection, to the same remote compute node. As mentioned, multiple processes may receive network messages received via a shared QP connection. A transfer process on a receiving compute node receives a network message through a QP connection using a receive queue. A second transfer process receives another message through the same QP connection using another receive queue. | 12-30-2010 |
| 20100332676 | Software Aware Throttle Based Flow Control - A system, comprising a compute node and coupled network adapter (NA), that supports improved data transfer request buffering and a more efficient method of determining the completion status of data transfer requests. Transfer requests received by the NA are stored in a first buffer then transmitted on a network interface. When significant network delays are detected and the first buffer is full, the NA sets a flag to stop software issuing transfer requests. Compliant software checks this flag before sending requests and does not issue further requests. A second NA buffer stores additional received transfer requests that were perhaps in-transit. When conditions improve the flag is cleared and the first buffer used again. Completion status is efficiently determined by grouping network transfer requests. The NA counts received requests and completed network requests for each group. Software determines if a group of requests is complete by reading a count value. | 12-30-2010 |
| 20100332789 | Network Use of Virtual Addresses Without Pinning or Registration - A system comprising a compute node and coupled network adapter (NA) that allows the NA to directly use CPU virtual addresses without pinning pages in system memory. The NA performs memory accesses in response to requests from various sources. Each request source is assigned to context. Each context has a descriptor that controls the address translation performed by the NA. When the CPU wants to update translation information it sends a synchronization request to the NA that causes the NA to stop fetching a category of requests associated with the information update. The category may be requests associated with a context or a page address. Once the NA determines that all the fetched requests in the category have completed it notifies the CPU and the CPU performs the information update. Once the update is complete, the CPU clears the synchronization request and the NA starts fetching requests in the category. | 12-30-2010 |
| 20120243542 | Scalable Interface for Connecting Multiple Computer Systems Which Performs Parallel MPI Header Matching - An interface device for a compute node in a computer cluster which performs Message Passing Interface (MPI) header matching using parallel matching units. The interface device comprises a memory that stores posted receive queues and unexpected queues. The posted receive queues store receive requests from a process executing on the compute node. The unexpected queues store headers of send requests (e.g., from other compute nodes) that do not have a matching receive request in the posted receive queues. The interface device also comprises a plurality of hardware pipelined matcher units. The matcher units perform header matching to determine if a header in the send request matches any headers in any of the plurality of posted receive queues. Matcher units perform the header matching in parallel. In other words, the plural matching units are configured to search the memory concurrently to perform header matching. | 09-27-2012 |
| 20120311122 | SYSTEM AND METHOD FOR PROVIDING SECURE SUBNET MANAGEMENT AGENT (SMA) BASED FENCING IN AN INFINIBAND (IB) NETWORK - A system and method can use a secure subnet management agent (SMA) to perform fencing operations in an InfiniBand (IB) fabric. A host channel adapter (HCA) in the fabric can be associated with a plurality of ports, wherein the HCA operates to implement a SMA in its embedded firmware. Furthermore, the SMA operates to be used as a proxy, by a port on the HCA, for updating one or more states associated with another port on the HCA. The one or more states are associated with at least one of updating a management key and resetting a link at another port on the HCA. | 12-06-2012 |
| 20120311124 | SYSTEM AND METHOD FOR SUPPORTING SUBNET MANAGER (SM) LEVEL ROBUST HANDLING OF UNKOWN MANAGEMENT KEY IN AN INFINIBAND (IB) NETWORK - A system and method can support subnet manager (SM) level robust handling of an incoming unknown management key in an InfiniBand (IB) network. A local SM in a fabric is adaptive to receive an incoming subnet management packet (SMP) from a remote SM, wherein the SMP contains a first management key. Furthermore, the local SM operates to check whether the first management key is consistent with a configuration associated with the local SM, and can silently drop the incoming SMP if the first management key is not consistent with the local SM configuration. | 12-06-2012 |
| 20120311143 | SYSTEM AND METHOD FOR SUPPORTING AUTOMATIC DISABLING OF DEGRADED LINKS IN AN INFINIBAND (IB) NETWORK - A system and method can support automatic disabling of degraded links in an InfiniBand (IB) network. At least one node in a fabric can monitor one or more local ports of the at least one node for one or more error states associated with a link at the at least one node, wherein the link is connected to a local port of the at least one node. The at least one node further allows a subnet manager to observe the one or more error states associated with the link at the at least one node, and allows the subnet manager to set the link in a basic state if the observed error states exceed a threshold. In this basic state, the link allows only SMP traffic and prevents data traffic and non-SMP based management traffic. | 12-06-2012 |
| 20120311182 | SYSTEM AND METHOD FOR SUPPORTING CONTROLLED RE-ROUTING IN AN INFINIBAND (IB) NETWORK - A system and method can support controlled re-routing in an InfiniBand (IB) fabric. The fabric is associated with a subnet manager that can detect a connectivity change in the fabric, and re-rout the fabric accordingly. The subnet manager can ensure that only accredited components and connectivity are utilized in the re-routing, and represent the connectivity that is not accredited within a local subnet or sub-subnet. The subnet manager can further maintain a node record or fabric configuration for evaluating the detected connectivity change in the fabric. | 12-06-2012 |
| 20120311332 | SYSTEM AND METHOD FOR PROVIDING SECURE SUBNET MANAGEMENT AGENT (SMA) IN AN INFINIBAND (IB) NETWORK - A system and method can provide a secure subnet management agent (SMA) in an Infiniband (IB) network. The system can comprise a host channel adapter (HCA) associated with a host, wherein the HCA operates to implement a SMA in its embedded firmware. The HCA can prevent a host administrator or software with root access to the host from changing the embedded firmware on the HCA and modifying one or more states associated with the SMA without being endorsed by a site administrator. Additionally, the SMA is associated with a management key, and the host is not allowed to observe the management key without being endorsed by a site administrator. | 12-06-2012 |
| 20120311333 | SYSTEM AND METHOD FOR AUTHENTICATING IDENTITY OF DISCOVERED COMPONENT IN AN INFINIBAND (IB) NETWORK - A system and method can verify trustfulness of a fabric component in an InfiniBand (IB) fabric. A subnet manager that is responsible for authenticating the fabric component using private/public key pairs. The subnet manager can first send a first encrypted message to a fabric component in the IB fabric, wherein the first encrypted message contains a token and is encrypted using a public key associated with the fabric component. Then, the fabric component is allowed to decode the first encrypted message using a private key associated with the fabric component, and to send a second encrypted message back to the subnet manager. Finally, the subnet manager can authenticate the fabric component if the second encrypted message contains correct information. | 12-06-2012 |
| 20130016718 | SYSTEM AND METHOD FOR USING A MULTICAST GROUP TO SUPPORT A FLOODING MECHANISM IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support a flooding mechanism using a multicast group in a middleware machine environment. The middleware machine environment can comprise a gateway instance that includes an external port for receiving one or more data packets from an external network. The middleware machine environment also comprises one or more host servers, each of which is associated with one or more virtual machines that can process the data packets. Furthermore, said host servers can provide virtual interfaces that belong to a virtual hub associated with the gateway instance. At least one said packet is a flooded packet that is specified with an unknown destination address when it is received at the external port. The gateway instance operates to send the flooded packet to the multicast group that operates to forward the flooded packet to one or more said host servers in the multicast group. | 01-17-2013 |
| 20130016719 | SYSTEM AND METHOD FOR SUPPORTING A SCALABLE FLOODING MECHANISM IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support a scalable packet forwarding mechanism in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances, wherein each network switch instance is associated with one or more external ports that are adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of packet dispatching components, each of which is responsible for forwarding a data packet to a virtual machine on a host server that operates to process the data packet. Additionally, a link aggregation component can combine multiple external ports into a logical port, and wherein the bandwidth of the logical port is linearly scaled accordingly to a total number of the multiple external ports. | 01-17-2013 |
| 20130016730 | SYSTEM AND METHOD FOR USING A PACKET PROCESS PROXY TO SUPPORT A FLOODING MECHANISM IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support flooding mechanism using a packet process proxy in a middleware machine environment. The middleware machine environment can comprise a gateway instance that includes an external port for receiving data packets from an external network. The middleware machine environment also comprises one or more host servers, each of which is associated with one or more virtual machines. Furthermore, said host servers can provide virtual interfaces that belong to a virtual hub associated with the gateway instance. At least one said packet is a flooded packet that is specified with an unknown destination address when it is received at the external port. The gateway instance can send the flooded packet to a designated virtual interface on a host server, and a packet process proxy on the host server can forward the flooded packet to a virtual machine on another host server for processing this packet. | 01-17-2013 |
| 20130016731 | SYSTEM AND METHOD FOR SUPPORTING DIRECT PACKET FORWARDING IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support packet direct forwarding in a middleware machine environment. The middleware machine environment comprises one or more external ports on at least one network switch instance, wherein each external port can receive one or more data packets from an external network. Furthermore, the middleware machine environment comprises a plurality of host channel adapter (HCA) ports on one or more host servers, wherein each said HCA port is associated with a said host server, and each said host server can support one or more virtual machines that operate to process the one or more data packets. The at least one network switch operate to send a packet received at an external port to a designated HCA port associated with the external port. An external switch in the external network can send the data packet to the particular external port based on a packet distribution algorithm. | 01-17-2013 |
| 20130019014 | SYSTEM AND METHOD FOR SUPPORTING VIRTUAL MACHINE MIGRATION IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support virtual machine migration in a middleware machine environment. The middleware machine environment can comprise one or more network switch instances with one or more external ports, each of which is adapted to receive data packets from an external network. Furthermore, the middleware machine environment can comprise a plurality of virtual interfaces on one or more host servers. Each said host server is associated with one or more virtual machines that can process the one or more data packets. A virtual machine on a first host server is allowed to migrate from the first host server to a second host server and operates to receive one or more packets via a virtual interface on the second host server and process the one or more data packets. | 01-17-2013 |
| 20130019302 | SYSTEM AND METHOD FOR SUPPORTING SUBNET MANAGEMENT PACKET (SMP) FIREWALL RESTRICTIONS IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can provide subnet management packet (SMP) firewall restrictions in a middleware machine environment. A secure firmware implementation can be provided on a host channel adaptor (HCA), wherein the HCA is associated with a host in the middleware machine environment. The secure firmware implementation operates to receive at least one SMP from the host or destined to the host, and prevent the host from sending or receiving the at least one SMP. Furthermore, the secure firmware implementation can include a proxy function that can communicate with external management components on behalf of the host. | 01-17-2013 |
| 20130019303 | SYSTEM AND METHOD FOR PROVIDING SWITCH BASED SUBNET MANAGEMENT PACKET (SMP) TRAFFIC PROTECTION IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can provide switch based subnet management packet (SMP) traffic protection in a middleware machine environment. The middleware machine environment includes a network switch that operates to receive at least one SMP destined for a subnet management agent (SMA). The network switch can check whether the at least one SMP includes a correct management key, and prevent the at least one SMP from being forwarded to the destined SMA when at least one SMP does not include the correct management key. Furthermore, the network switch can specify a different management key for each external port and can enforce separate restrictions on ingress and egress SMP traffic at a particular external port. | 01-17-2013 |
| 20130121154 | SYSTEM AND METHOD FOR USING DYNAMIC ALLOCATION OF VIRTUAL LANES TO ALLEVIATE CONGESTION IN A FAT-TREE TOPOLOGY - A system and method can prevent traffic congestion in a middleware machine environment with a plurality of switches in a fat-tree topology. A subnet manager can sweep a subnet in the middleware machine environment to discover changes and maintain the subnet fully connected. A performance manager can retrieve performance and error-related information from one or more performance management agents that are associated with one or more components in the subnet. Then, a host can dynamically reconfigure one or more virtual lanes in order to improve network performances. | 05-16-2013 |
| 20130124910 | SYSTEM AND METHOD FOR SIGNALING DYNAMIC RECONFIGURATION EVENTS IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can provide fault tolerance in a middleware machine environment. A subnet manager can determine whether there is a path record change when a fault occurs in the middleware machine environment. Furthermore, the subnet manager can signal a dynamic reconfiguration event to at least one host in the middleware machine environment. The at least one host can send a message to the subnet manager to query for a latest path record. Then, the subnet manager can provide a latest path record to the at least one host. | 05-16-2013 |
| 20130254321 | SYSTEM AND METHOD FOR SUPPORTING LIVE MIGRATION OF VIRTUAL MACHINES IN A VIRTUALIZATION ENVIRONMENT - A system and method can support virtual machine live migration in a network. A virtual switch can be associated with a plurality of virtual functions (VFs), and wherein each said virtual function (VF) is associated with a separate virtual interface (VI) space. At least one virtual machine that is attached with a said virtual function (VF) can be associated with a virtual interface (VI), e.g. a queue pair (QP) in an Infiniband (IB) architecture. Furthermore, said at least one virtual machine operates to perform a live migration from a first host to a second host with said virtual function (VF) attached. | 09-26-2013 |
| 20130254368 | SYSTEM AND METHOD FOR SUPPORTING LIVE MIGRATION OF VIRTUAL MACHINES IN AN INFINIBAND NETWORK - A system and method can support virtual machine live migration in a network. A plurality of hosts can be interconnected via the network. Each host contains one or more virtual machines. At least one virtual machine operates to perform a live migration from a first host to a second host. The virtual function, which is attached to a queue pair (QP), can be supported by a host channel adapter (HCA) on a host. | 09-26-2013 |
| 20130254404 | SYSTEM AND METHOD FOR SUPPORTING LIVE MIGRATION OF VIRTUAL MACHINES BASED ON AN EXTENDED HOST CHANNEL ADAPTOR (HCA) MODEL - A system and method can support virtual machine live migration in a network. A fabric adaptor can be associated with a plurality of virtual host channel adapters (vHCAs), and wherein each said virtual host channel adapter (vHCA) is associated with a separate queue pair (QP) space. At least one virtual machine operates to perform a live migration from a first host to a second host, wherein said at least one virtual machine is attached with a said virtual host channel adapter (vHCA) that is associated with a queue pair (QP) in a said queue pair (QP) space, and wherein said queue pair (QP) operates to signal a peer QP about the live migration and provide said peer QP with address information after migration. | 09-26-2013 |
| 20130254424 | SYSTEM AND METHOD FOR PROVIDING A SCALABLE SIGNALING MECHANISM FOR VIRTUAL MACHINE MIGRATION IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support a signaling method in a virtualization environment. The management domain on one or more physical servers can be provided with a mapping table. The management domain operates to receive a message from the subnet administrator, wherein the message indicates a path record change event, such as a virtual machine (VM) migration event in the network. Then, the management domain can forward the received message to one or more virtual machine associated with the management domain based on the mapping table. | 09-26-2013 |
| 20130301645 | SYSTEM AND METHOD FOR ROUTING TRAFFIC BETWEEN DISTINCT INFINIBAND SUBNETS BASED ON SOURCE ROUTING - A system and method can rout traffic between distinct subnets in a network environment. A router that connects the distinct subnets, such as InfiniBand (IB) subnets, can receive a list of destinations that the router is responsible for routing one or more packets to. Then, the router can generate a random number based on a source local identifier (LID) and a destination LID associated with the one or more packets, and use a modulo based hash to select one router port from a plurality of output router ports of the router. | 11-14-2013 |
| 20130301646 | SYSTEM AND METHOD FOR ROUTING TRAFFIC BETWEEN DISTINCT INFINIBAND SUBNETS BASED ON FAT-TREE ROUTING - A system and method can rout traffic between distinct subnets in a network environment. A router that connects the distinct subnets, such as InfiniBand (IB) subnets, can receive a list of destinations that the router is responsible for routing one or more packets to. Furthermore, the router can obtain information, from one or more switches in the at least one subnet, on which downward output ports of the router can be used for routing the one or more packets, and build a routing table based on the obtained information. | 11-14-2013 |
| 20130304699 | SYSTEM AND METHOD FOR SUPPORTING CONFIGURATION DAEMON (CD) IN A NETWORK ENVIRONMENT - A system and method can support network management in a network environment. The network environment can include a plurality of configuration daemons (CDs), wherein a master CD is an active CD on a switch with a master subnet manager (SM). The master CD operates to perform consistency check on one or more states associated with one or more peer CDs in the network environment, and replicate a configuration file to the one or more peer CDs, wherein the configuration file includes at least one management key (M_Key) value. | 11-14-2013 |
| 20130304883 | SYSTEM AND METHOD FOR SUPPORTING STATE SYNCHRONIZATION IN A NETWORK ENVIRONMENT - A system and method can support network management in a network environment. The network environment can include a plurality of configuration daemons (CDs), wherein each CD resides on a switch in the network environment. The CD operates to receive a configuration file that includes a list of known management key (M_Key) values. Furthermore, the CD operates to store the configuration file, and make the configuration file available to a local subnet manager(SM) on the switch, wherein the local SM is associated with a currently used M_Key value. Then, the CD operates to update the local SM with a new M_Key, after receiving an instruction from a master CD that is associated with a master SM in the network environment. | 11-14-2013 |
| 20130304889 | SYSTEM AND METHOD FOR PROVIDING A TRANSACTIONAL COMMAND LINE INTERFACE (CLI) IN A NETWORK ENVIRONMENT - A system and method can support subnet management in a network environment. A network switch in the network environment can provide a transactional interface, wherein the transactional interface allows a user to interact with the network environment using a transaction. The transactional interface allows a user to group one or more operations in the transaction, and ensures that no conflicting operations are included in the transaction. | 11-14-2013 |
| 20130304890 | SYSTEM AND METHOD FOR SUPPORTING SUBNET MANAGER (SM) MASTER NEGOTIATION IN A NETWORK ENVIRONMENT - A system and method can support master negotiation in a network environment. A subnet manager (SM) can perform subnet discovery on a subnet in the network environment via a subnet manager (SM) in the subnet, wherein the subnet includes a plurality of SMs. Furthermore, the SM can communicate with the other SMs in the subnet to check for a number of known secret keys, and select a SM from the plurality of SMs as a master SM, wherein the master SM has the highest number of known keys. | 11-14-2013 |
| 20130304891 | SYSTEM AND METHOD FOR SUPPORTING DRY-RUN MODE IN A NETWORK ENVIROMENT - A system and method can support subnet management in a network environment. One or more inactivated switches can be included in a subnet, wherein each of the inactivated switches is associated with an empty set of known secret keys. A subnet manager (SM) in a dry-run mode can perform one or more dry-run operations on the one or more inactivated switches, before activating the one or more inactivated switches. | 11-14-2013 |
| 20130304908 | SYSTEM AND METHOD FOR SUPPORTING PERSISTENT SECURE MANAGEMENT KEY (M_KEY) IN A NETWORK ENVIRONMENT - A system and method can support security management in a network environment. A switch in the network environment includes a switch chip, which is configured with a secure management key (M_Key) prior to one or more external links becoming operational. Furthermore, a local daemon in the switch can monitor the secure M_key on the switch chip, and persistently store a current M_key used by a local subnet manager (SM). The current M_key is a state that is dynamically updated in a fabric in the network environment. | 11-14-2013 |
| 20140056121 | SYSTEM AND METHOD FOR SUPPORTING HIGH AVAILABLE (HA) NETWORK COMMUNICATION IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can implement highly available Internet Protocol (IP) based communication across multiple independent communication paths. The system can have different IP addresses associated with different interfaces and communication paths and can implement communication fail-over as part of the communication layers above the IP layer, e.g. at the application level. The system can provide a balance between an average fail-over time and implementation complexity, and can achieve simplicity and robustness while providing high communication performance. | 02-27-2014 |
| 20140059215 | SYSTEM AND METHOD FOR ENSURING INTERNET PROTOCOL (IP) ADDRESS AND NODE NAME CONSISTENCY IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can ensure Internet Protocol (IP) address and node name consistency when performing remote transactions via multiple un-related IP addresses for the same remote peer. The system can ensure that all cooperating peer nodes are in full agreement of the names and IP addresses at any point in time. In particular, when network configurations can be updated dynamically, the system can ensure that such updates do not lead to inconsistent or failed transactions because a peer node has a stale view of what addresses to use. Furthermore, the peer node that initiates the transaction can verify that all the other peer nodes have exactly the same view of the overall system configuration, in order to ensure that each distributed transaction is carried out using consistent address information. | 02-27-2014 |
| 20140064287 | SYSTEM AND METHOD FOR SUPPORTING DISCOVERY AND ROUTING DEGRADED FAT-TREES IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support discovering and routing in a fabric with a plurality of switches. The system allows one or more switches in the fabric to be tagged with a switch role. Then, a subnet manager in the fabric detect the switch role that is associated with the one or more switches. Furthermore, a routing algorithm can be applied on the fabric based on the detected switch role associated with the one or more switches. | 03-06-2014 |
| 20140241208 | SYSTEM AND METHOD FOR SUPPORTING SUB-SUBNET IN AN INFINIBAND (IB) NETWORK - A system and method can support multiple domains in an InfiniBand (IB) fabric. The IB fabric can include one or more subnets, wherein each said subnet contains one or more switch nodes. Additionally, at least one said subnet can be divided into one or more sub-subnets, wherein each said sub-subnet is managed by a separate sub-subnet manager that is associated with a unique management key, and wherein said one or more sub-subnets are connected by one or more sub-subnet gateway switch nodes, wherein each sub-subnet gateway switch node belongs to one sub-subnet. | 08-28-2014 |
| 20150030034 | SYSTEM AND METHOD FOR SUPPORTING MULTI-HOMED FAT-TREE ROUTING IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support multi-homed routing in a network environment, which can be based on InfiniBand architecture using a fat-tree or a similar topology. The system can provide an end node that is associated with a switch port on a leaf switch in a network fabric. Then, the system can perform routing for each of a plurality of ports on the end node, and ensure that the plurality of ports on the end node take mutually independent paths. | 01-29-2015 |
| 20150063355 | SYSTEM AND METHOD FOR SUPPORTING DATA SERVICE ADDRESSING IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can support data service address resolution in a network environment. An intermediate node can receive an incoming data packet from a source node, wherein the incoming data packet targets a destination node, and wherein the incoming data packet includes a global identifier for the destination node and a local identifier for the intermediate node. Furthermore, the intermediate node can obtain local addressing information for the destination node based on the global identifier for the destination node. Then, the intermediate node can send an outgoing data packet to the destination node based on the obtained local addressing information for the destination node. | 03-05-2015 |
| 20150063356 | SYSTEM AND METHOD FOR SUPPORTING HOST CHANNEL ADAPTER (HCA) FILTERING IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can provide a data service in a network environment. The network environment can include a node, which supports a data service component that can provide a data service. Additionally, a filter can be provided on a networking device, such as a host channel adaptor (HCA) that is associated with the node. The networking device operates to use the filter to identify one or more packets targeting the data service component without protocol termination. Furthermore, the filter can forward said one or more packets to the data service component. | 03-05-2015 |
| 20150067020 | SYSTEM AND METHOD FOR PROVIDING A DATA SERVICE IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can provide a data service in a network environment. The system can provide a data service component on a node in the network environment, wherein the network environment includes a plurality of nodes interconnected via a network fabric. Furthermore, the system can use a native packet forwarding mechanism to direct a data flow in the network fabric to said data service component on the node. Then, the system can use said data service component to process one or more data packets in the data flow in the network fabric. | 03-05-2015 |
| 20150067191 | SYSTEM AND METHOD FOR CONTROLLING A DATA FLOW IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can provide a data service in a network environment. A subnet administrator can receive a path record resolution request from a source node, wherein the source node uses the path record resolution request to obtain an address of a destination node. Furthermore, the subnet administrator can provide an address of an intermediate node to the source node, wherein the intermediate node provides the data service. Then, the source node can send one or more data packets in a data flow to the intermediate node based on the address of the intermediate node. | 03-05-2015 |
| 20150161391 | SYSTEM AND METHOD FOR SUPPORTING HOST-BASED FIRMWARE UPGRADE OF INPUT/OUTPUT (I/O) DEVICES IN A MIDDLEWARE MACHINE ENVIRONMENT - A system and method can support controlled and secure firmware upgrade in a middleware machine environment. The system can provide a boot image of an operating system (OS) in a host node, wherein the host node connects to a shared resource, such as a network fabric, via an input/out (I/O) device. The boot image can receive at least one of a firmware image and a firmware update from the host node, and upgrade firmware in the I/O device associated with the host node. Furthermore, the host-based firmware upgrade can be based on a special boot image that is prevented from accessing local information on the host node, or a normal boot image that is prevented from controlling the I/O device. | 06-11-2015 |
| 20150244572 | SYSTEM AND METHOD FOR SUPPORTING RELIABLE CONNECTION (RC) BASED SUBNET ADMINISTRATOR (SA) ACCESS IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can support subnet management in a network environment, such as an engineered system for middleware and application execution or a middleware machine environment. A subnet manager (SM) can retrieve information for setting up a reliable connection (RC) between a subnet administrator (SA) and a client node in a subnet. Furthermore, the system can set up one or more connection states for a port associated with the SM node to establish the RC connection between the port associated with the SM node and a port associated with said client node. Then, the SM can activate the port associated with said client node. | 08-27-2015 |
| 20150244817 | SYSTEM AND METHOD FOR PREVENTING DENIAL OF SERVICE (DOS) ATTACK ON SUBNET ADMINISTRATOR (SA) ACCESS IN AN ENGINEERED SYSTEM FOR MIDDLEWARE AND APPLICATION EXECUTION - A system and method can support subnet management in a network environment, such as an engineered system for middleware and application execution or a middleware machine environment. The system can associate a subnet administrator (SA) in a subnet with one or more SA proxies. Furthermore, said one or more SA proxies can receive one or more requests from one or more client nodes. Then, said SA can handle said one or more requests, which are forwarded from said one or more SA proxies. Additionally, a dedicated queue pair (QP) number can be allocated for each client node, so that there is no need for always sending an initial request to a pre-defined well-known QP number. | 08-27-2015 |
| 20160072816 | SYSTEM AND METHOD FOR PROVIDING AN INTEGRATED FIREWALL FOR SECURE NETWORK COMMUNICATION IN A MULTI-TENANT ENVIRONMENT - An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node. | 03-10-2016 |
| 20160072817 | SYSTEM AND METHOD FOR PROVIDING FOR SECURE NETWORK COMMUNICATION IN A MULTI-TENANT ENVIRONMENT - A security solution provides secure communication in a multi-tenant environment which includes a connection-based fabric, storage cells holding data associated with different tenants, database servers which provide a plurality of database services using said data, application servers hosting database service consumers. The fabric is configured into partitions isolating the storage cells from the database service consumers. The application servers securely associate unique database service consumer identities with each database service consumer and all communications with the database servers. The database servers reject all communications from the application servers which do not include an identity and use an access control list to control access from the database service consumers to the database services using address resolution access control, connection establishment access control, and data exchange access control based on said access control list. DoS attack prevention can also be performed based on consumer identities included in packets. | 03-10-2016 |
