Back to results
US 10,541,972 B2Granted
Rule swapping in a packet network
AssigneeCentripetal Networks, Inc.
InventorsDavid K. Ahn, Steven Rogers, Sean Moore
Life of this patent
Estimating the term…
Abstract
In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.
Claims24
A method comprising:
- receiving, by a network device, a first rule set;
- after receiving the first rule set, modifying, by the network device, the first rule set;
- after modifying the first rule set, configuring the network device to process packets in accordance with the first rule set;
- after the modifying of the first rule set and the configuring of the network device to process packets in accordance with the first rule set, receiving, by the network device, a plurality of packets;
- processing, by the network device, a first portion of the received plurality of packets in accordance with the first rule set;
- after receiving the first rule set, receiving, by the network device, a second rule set;
- after receiving the second rule set, modifying, by the network device, the second rule set;
- and
- after modifying the second rule set and based on a signal to process packets in accordance with the second rule set:
- ceasing processing of one or more packets of the plurality of packets;
- caching the one or more packets of the plurality of packets;
- reconfiguring the network device to process packets in accordance with the second rule set;
- and
- after the reconfiguring of the network device to process packets in accordance with the second rule set, processing the one or more cached packets in accordance with the second rule set.
11 more elements
A network device comprising:
- at least one processor;
- and
- memory comprising instructions that, when executed by the at least one processor, cause the network device to:
- receive a first rule set;
- after receiving the first rule set, modify the first rule set;
- after modifying the first rule set, configure the at least one processor to process packets in accordance with the first rule set;
- after modifying of the first rule set and the configuring of the at least one processor to process packets in accordance with the first rule set, receive a plurality of packets;
- process a first portion of the plurality of packets in accordance with the first rule set;
- after receiving the first rule set, receive a second rule set;
- after receiving the second rule set, modify the second rule set;
- and
- after modifying the second rule set and based on a signal to process packets in accordance with the second rule set:
- cease processing of one or more packets of the plurality of packets;
- cache the one or more packets of the plurality of packets;
- reconfigure the at least one processor to process packets in accordance with the second rule set;
- and
- after the reconfiguring of the at least one processor to process packets in accordance with the second rule set, process the one or more cached packets in accordance with the second rule set.
14 more elements
One or more non-transitory computer-readable media comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to:
- receive a first rule set;
- after receiving the first rule set, modify the first rule set;
- after modifying the first rule set, configure the one or more processors to process packets in accordance with the first rule set;
- after modifying of the first rule set and the configuring of the one or more processors to process packets in accordance with the first rule set, receive a plurality of packets;
- process a first portion of the plurality of packets in accordance with the first rule set;
- after receiving the first rule set, receive a second rule set;
- after receiving the second rule set, modify the second rule set;
- and
- after modifying the second rule set and based on a signal to process packets in accordance with the second rule set:
- cease processing of one or more packets of the plurality of packets;
- cache the one or more packets of the plurality of packets;
- reconfigure the one or more processors to process packets in accordance with the second rule set;
- and
- after the reconfiguring of the one or more processors to process packets in accordance with the second rule set, process the one or more cached packets in accordance with the second rule set.
11 more elements
Dependencies are inferred from the claim text.