Patent application number | Description | Published |
20100132028 | METHOD FOR IMPLEMENTING SECURITY-RELATED PROCESSING ON PACKET AND NETWORK SECURITY DEVICE - Embodiments of the present invention provide method for implementing security-related processing on packet and a network security device. Through establishing a relationship between stream attribute information of an initial packet of a stream and security-related processing information implemented on the initial packet, when a succeeding packet of the stream is received, the previously stored relationship is acquired according to stream attribute information of the succeeding packet, the security-related processing is implemented on the succeeding packet according to the security-related processing information in the relationship. Therefore, according to the method for implementing security-related processing on packet and the network security device provided by the present invention, the process of searching for security information entries for succeeding packets of a stream is not required, the security-related processing procedure of the packet is thus accelerated, and the packet processing efficiency is improved. | 05-27-2010 |
20100195647 | METHOD AND APPARATUS FOR PACKET PROCESSING - The present invention discloses a packet processing apparatus and method. The packet processing apparatus is applied to an L4˜L7 network device, including a plurality of interface processing units and a plurality of service processing units, the interface processing units are connected with the service processing units through a first connection unit; and each of the interface processing units is adapted to select, after receiving a packet from outside, a service processing unit from all the service processing units and transmit the packet to the selected service processing unit; and each of the service processing units is adapted to perform service processing to the packet after receiving the packet. The present invention improves packet processing capability and reliability of the L4˜L7 network device. | 08-05-2010 |
20100306466 | METHOD FOR IMPROVING DISK AVAILABILITY AND DISK ARRAY CONTROLLER - The present invention discloses a method for improving disk availability and a disk array controller. The method includes: determining, when detecting that part of tracks of a disk in a disk array is damaged, a first master data storage space in a damaged track; selecting an idle first backup data storage space from at least one back data storage space, establishing a corresponding relation between an address of a strip contained in the first master data storage space and an address of a strip contained in the first backup data storage space; and receiving an instruction for accessing the strip contained in the first master data storage space, finding the strip contained in the first backup data storage space according to an address of the strip in the instruction and the corresponding relation, and accessing the strip contained in the first backup data storage space. | 12-02-2010 |
20100322239 | METHOD AND AN APPARATUS FOR PROCESSING PACKETS - The present invention discloses a packet processing method, which applies to a high-performance and scalable flow processing system architecture. The service board performs security processing for packets received from external devices by using the firewall function before sending them to the main CPU; similarly, the service board also performs security processing for packets sent from the main CPU by using the firewall function before the main CPU sends them to external devices. The methods of the present invention utilize high performance and good scalability of the new architecture. In a network with heavy and high-speed traffic, the service board performs security processing for packets by using the firewall function and then transmits the valid packets to the main CPU. Thus, the main CPU is protected by the firewall function against attack packets. | 12-23-2010 |
20110153584 | METHOD, SYSTEM, AND ENGINE DISPATCH FOR CONTENT SEARCH - The present invention discloses a method, system, and engine dispatch unit for content search, wherein the engine dispatch unit connects to at least a processor and two search engines, obtains objects from the processor(s), and selects search engines to perform content search according to the load of each search engine; the selected search engines perform content search for the objects according to preset matching rules. Solutions of the present invention can effectively improve content search performance. | 06-23-2011 |
20110249674 | APPARATUS AND METHOD FOR PROCESSING PACKET - The present invention provides an apparatus and method for processing a packet. An interface processing module selects one from all service processing modules as a service processing module for processing a packet; if the service processing module needs to perform tunnel processing for the packet, the service processing module transmits the packet after performing the tunnel processing; if another service processing module needs to perform tunnel processing for the packet, the service processing module transmits the packet to a service processing module needing to perform tunnel processing for the packet. According to the present invention, the packet can be processed uniformly by the service processing module, so it is not unnecessary to store session states in the service processing modules, and also not unnecessary to perform synchronization between the service processing modules, which greatly decreases complexity of processing the packet and saves system bandwidth. | 10-13-2011 |
20130265877 | MULTIPLE PATH LOAD DISTRIBUTION FOR HOST COMMUNICATION WITH A TAPE STORAGE DEVICE - A multiple port host communicates with multiple tape drives by requesting information associated with a particular tape. Information of availability status of a plurality of host ports is provided. Traversing all host initiator ports finds a host port with no or the least traffic load for a tape reservation request. A host port's traffic load calculation uses instant and the updated historical traffic as primary and secondary factors. Every host port's traffic load is updated for every read/write command, and is used for path selection of reservation requests. The instant load is relatively sensitive but will be zero under light load. The historical load is aware of the light load though it is not sensitive enough when a burst I/O occurs. With the traffic load calculated from instant and historical loads, the distribution of tape tasks is spread evenly among host initiator ports under light load and burst I/O scenarios. | 10-10-2013 |
20130268693 | MULTIPLE PATH LOAD DISTRIBUTION FOR HOST COMMUNICATION WITH A TAPE STORAGE DRIVE - A method for a multiple port host to communicate with multiple tape drives is provided by requesting information associated with a particular tape. Information is provided that is indicative of availability status of a plurality of host ports. It is determined if there is a traffic load or a reservation load on an active host port. The active host port is reserved if there is not a traffic load or a reservation load on the active host port. Another method receives input indicative of read/write information from at least one tape drive at a host bus adapter. A host port count is increased, and a size of the read/write information is increased until the read/write information is not accepted by the host bus adapter. The host port count is decreased, and the size of the read/write information is decreased until the read/write information is accepted. | 10-10-2013 |
20140258579 | MULTIPLE PATH LOAD DISTRIBUTION FOR HOST COMMUNICATION WITH A TAPE STORAGE DEVICE - A multiple port host communicates with multiple tape drives by requesting information associated with a particular tape. Information of availability status of a plurality of host ports is provided. Traversing all host initiator ports finds a host port with no or the least traffic load for a tape reservation request. A host port's traffic load calculation uses instant and the updated historical traffic as primary and secondary factors. Every host port's traffic load is updated for every read/write command, and is used for path selection of reservation requests. The instant load is relatively sensitive but will be zero under light load. The historical load is aware of the light load though it is not sensitive enough when a burst I/O occurs. With the traffic load calculated from instant and historical loads, the distribution of tape tasks is spread evenly among host initiator ports under light load and burst I/O scenarios. | 09-11-2014 |