Distributed network instrumentation system
AssigneeHewlett-Packard Development Company, L.P.
InventorBryan Stiekes
Life of this patent
Estimating the term…
Abstract
A distributed network instrumentation system (100) includes a security management station (110) including a global network policy decomposer (112) configured to decompose global network security policies to local security policies for distributed policy enforcement, and a network interface (220) communicatively coupled to a compute platform (200), The network interface (220) is configured to off-load processing of the local security policies and end-to-end encryption from an operating system (210) of the compute platform (200) for facilitating network instrumentation.
Claims14
A distributed network instrumentation system (100) comprising;
- a security management station (110) comprising a global network policy decomposer (112) configured to decompose global network security policies to local security policies for distributed policy enforcement;
- and
- a network interface (220) communicatively coupled to a compute platform (200), wherein said network interface (220) is configured to off-load processing of said local security policies and end-to-end encryption from an operating system (210) of said compute platform for facilitating network instrumentation.
A method for distributed policy enforcement and network instrumentation (200), said method comprising:
- decomposing global network security policies into local security policies by a security management station (210);
- off-loading processing of said local security policies and end-to-end encryption from an operating system of a compute platform to an network interface communicatively coupled to said compute platform (215);
- and
- identifying interesting traffic for said network interface by an instrumentation management system (220).
Dependencies are inferred from the claim text.