Back to results
US 12,598,119 B2Granted
Programmable switching device for network infrastructures
AssigneeAmyna Systems Inc.
InventorsJames Kyriannis, Min Kyriannis
Life of this patent
Estimating the term…
Abstract
A programmable switching device within a network infrastructure that includes at least one port; and at least one programmable filter communicatively coupled to the at least one port, wherein the at least one programmable filter is configured to permit/deny data packets being transmitted to or from a networked device connected to the at least one port based on a set of defined rules.
Claims30
A system, comprising:
- one or more network devices of a network infrastructure, the one or more network devices comprising one or more processors coupled to memory, the one or more network devices configured to:
- identify a first network packet from a source device directed to a destination device, the first network packet received by a first network device of the one or more network devices;
- generate, using the first network packet, a first node identifier corresponding to the source device, the first node identifier comprising a Layer-2 address of the source device, a Layer-2 Protocol via which the first network packet was transmitted, and a Layer-3 address of the source device;
- generate, using the first network packet, a second node identifier corresponding to the destination device, the second node identifier comprising a Layer-2 address of the destination device, the Layer-2 Protocol via which the first network packet was transmitted, and a Layer-3 address of the destination device;
- generate an entry in a table based on the one or more network devices having a configuration setting set to a first mode, the entry identifying the first node identifier, the second node identifier, a port identifier of a port of the first network device that received the first network packet, and a switch identifier identifying the first network device, the first mode to cause transmission of the first network packet from the source device to the destination device via the one or more network devices;
- identify a second network packet from the source device directed to the destination device;
- determine, that the second network packet is received via the port of the first network device identified in the entry in the table and that a source node identifier and a destination node identifier derived from the second network packet match the first node identifier and the second node identifier of the entry;
- determine, based on the one or more network devices having the configuration setting set to a second mode different from the first mode, that the entry in the table is associated with an action for a network connection between the source device and the destination device;
- and
- permit or restrict transmission of the second network packet to the destination device based on the action associated with the entry and based on the one or more network devices operating according to the second mode.
7 more elements
A method, comprising:
- identifying, by one or more network devices of a network infrastructure comprising one or more processors coupled to memory, a first network packet from a source device directed to a destination device, the first network packet received by a first network device of the one or more network devices;
- generating, by the one or more network devices, using the first network packet, a first node identifier corresponding to the source device, the first node identifier comprising a Layer-2 address of the source device, a Layer-2 Protocol via which the first network packet was transmitted, and a Layer-3 address of the source device;
- generating, by the one or more network devices, using the first network packet, a second node identifier corresponding to the destination device, the second node identifier comprising a Layer-2 address of the destination device, the Layer-2 Protocol via which the first network packet was transmitted, and a Layer-3 address of the destination device;
- generating, by the one or more network devices, an entry in a table based on the one or more network devices having a configuration setting set to in a first mode, the entry identifying the first node identifier, the second node identifier, a port identifier of a port of the first network device that received the first network packet, and a switch identifier identifying the first network device, the first mode to cause transmission of the first network packet from the source device to the destination device via the one or more network devices;
- identifying, by the one or more network devices, a second network packet from the source device directed to the destination device;
- determining, by the one or more network devices, that the second network packet is received via the port of the first network device identified in the entry in the table and that a source node identifier and a destination node identifier derived from the second network packet match the first node identifier and the second node identifier of the entry;
- determining, by the one or more network devices, based on the one or more network devices having the configuration setting set to a second mode different from the first mode, that the entry in the table is associated with an action for a network connection between the source device and the destination device;
- and
- permitting or restricting, by the one or more network devices, transmission of the second network packet to the destination device based on the action associated with the entry and based on the one or more network devices operating according to the second mode.
6 more elements
Dependencies are inferred from the claim text.