发明名称 Distributed network security system and a hardware processor therefor
摘要 An architecture provides capabilities to transport and process Internet Protocol (IP) packets from Layer 2 through transport protocol layer and may also provide packet inspection through Layer 7. A set of engines may perform pass-through packet classification, policy processing and/or security processing enabling packet streaming through the architecture at nearly the full line rate. A scheduler schedules packets to packet processors for processing. An internal memory or local session database cache stores a session information database for a certain number of active sessions. The session information that is not in the internal memory is stored and retrieved to/from an additional memory. An application running on an initiator or target can in certain instantiations register a region of memory, which is made available to its peer(s) for access directly without substantial host intervention through RDMA data transfer. A security system is also disclosed that enables a new way of implementing security capabilities inside enterprise networks in a distributed manner using a protocol processing hardware with appropriate security features.
申请公布号 US2004165588(A1) 申请公布日期 2004.08.26
申请号 US20040783890 申请日期 2004.02.20
申请人 PANDYA ASHISH A. 发明人 PANDYA ASHISH A.
分类号 H04L12/56;(IPC1-7):H04L12/56 主分类号 H04L12/56
代理机构 代理人
主权项
地址