Back to results
US 2026/0246721 A1Published application
Programmable switching device for network infrastructures
AssigneeAmyna Systems Inc.
InventorsJames KYRIANNIS, Min KYRIANNIS
Life of this patent
Estimating the term…
Abstract
A programmable switching device within a network infrastructure that includes at least one port; and at least one programmable filter communicatively coupled to the at least one port, wherein the at least one programmable filter is configured to permit/deny data packets being transmitted to or from a networked device connected to the at least one port based on a set of defined rules.
Claims20
A method comprising:
- identifying, by one or more network devices of a network infrastructure, a first data packet destined for a first connected device communicatively coupled to a programmable switch device;
- identifying, by the one or more network devices, a first tuple including a first node identifier identifying the first connected device, the first node identifier generated using a first MAC address of the first connected device, a first IP address assigned to the first connected device, and a first communications protocol over which the first data packet is to be transmitted to the first connected device;
- determining, by the one or more network devices, to restrict transmission of the first data packet to the first connected device responsive to applying, to the first data packet, one or more network policies using the first node identifier of the first tuple;
- dropping, by the one or more network devices, the first data packet prior to transmission to the first connected device;
- identifying, by the one or more network devices, a second data packet destined for the first connected device;
- identifying, by the one or more network devices, a second tuple including a second node identifier identifying the first connected device, the second node identifier generated i) using at most two of a) the first MAC address, b) the first IP address, or c) the first communications protocol and ii) using at least one of a) a second MAC address of the first connected device, b) a second IP address assigned to the first connected device, or c) a second communications protocol over which the first data packet is to be transmitted to the first connected device;
- determining, by the one or more network devices, to allow transmission of the second data packet to the network device responsive to applying, to the second data packet, the one or more network policies using the second node identifier of the second tuple;
- and
- transmitting, by the one or more network devices, the second data packet to the first connected device.
6 more elements
A system comprising:
- one or more network configured to:
- identify a first data packet destined for a first connected device communicatively coupled to a programmable switch device;
- identify a first tuple including a first node identifier identifying the first connected device, the first node identifier generated using a first MAC address of the first connected device, a first IP address assigned to the first connected device, and a first communications protocol over which the first data packet is to be transmitted to the first connected device;
- determine to restrict transmission of the first data packet to the first connected device responsive to applying, to the first data packet, one or more network policies using the first node identifier of the first tuple;
- drop the first data packet prior to transmission to the first connected device;
- identify a second data packet destined for the first connected device;
- identify a second tuple including a second node identifier identifying the first connected device, the second node identifier generated i) using at most two of a) the first MAC address, b) the first IP address, or c) the first communications protocol and ii) using at least one of a) a second MAC address of the first connected device, b) a second IP address assigned to the first connected device, or c) a second communications protocol over which the first data packet is to be transmitted to the first connected device;
- determine to allow transmission of the second data packet to the network device responsive to applying, to the second data packet, the one or more network policies using the second node identifier of the second tuple;
- and
- transmit the second data packet to the first connected device.
7 more elements
Dependencies are inferred from the claim text.