Back to results
US 11,539,665 B2Granted
Rule swapping in a packet network
AssigneeCentripetal Networks, Inc.
InventorsDavid K. Ahn, Steven Rogers, Sean Moore
Life of this patent
Estimating the term…
Abstract
In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.
Claims27
A method comprising:
- receiving, by a packet filtering device, a first set of packet filtering rules;
- configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- receiving, by the packet filtering device, a plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- processing, by the packet filtering device, a first portion of the plurality of packets in accordance with the first set of packet filtering rules;
- receiving, by the packet filtering device, a second set of packet filtering rules;
- based on a signal to process packets in accordance with the second set of packet filtering rules:
- ceasing processing, by the packet filtering device, of the plurality of packets;
- temporarily storing, by the packet filtering device, an unprocessed second portion of the plurality of packets;
- reconfiguring the packet filtering device to process packets in accordance with the second set of packet filtering rules;
- and
- after completion of the reconfiguring of the packet filtering device to process packets in accordance with the second set of packet filtering rules, processing, by the packet filtering device, the temporarily stored, unprocessed second portion of the plurality of packets in accordance with the second set of packet filtering rules.
8 more elements
A packet filtering device comprising:
- one or more processors;
- and
- memory comprising instructions that, when executed by the one or more processors, cause the packet filtering device to:
- receive a first set of packet filtering rules;
- configure the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- receive a plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- process a first portion of the plurality of packets in accordance with the first set of packet filtering rules;
- receive a second set of packet filtering rules;
- and
- based on a signal to process packets in accordance with the second set of packet filtering rules:
- cease processing of the plurality of packets;
- temporarily store an unprocessed second portion of the plurality of packets;
- reconfigure the packet filtering device to process packets in accordance with the second set of packet filtering rules;
- and
- after completion of the reconfiguring of the packet filtering device to process packets in accordance with the second set of packet filtering rules, process the temporarily stored, unprocessed second portion of the plurality of packets in accordance with the second set of packet filtering rules.
12 more elements
One or more non-transitory computer-readable media comprising instructions that, when executed, cause a packet filtering device to:
- receive a first set of packet filtering rules;
- configure the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- receive a plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;
- process a first portion of the plurality of packets in accordance with the first set of packet filtering rules;
- receive a second set of packet filtering rules;
- based on a signal to process packets in accordance with the second set of packet filtering rules:
- cease processing of the plurality of packets;
- temporarily store an unprocessed second portion of the plurality of packets;
- reconfigure the packet filtering device to process packets in accordance with the second set of packet filtering rules;
- and
- after completing reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules, process the temporarily stored, unprocessed second portion of the plurality of packets in accordance with the second set of packet filtering rules.
8 more elements
Dependencies are inferred from the claim text.