Securely virtualizating network services
AssigneeAruba Networks, Inc.
InventorsJohn Taylor, Randy Chou, Pradeep Iyer, Dave Logan
Life of this patent
Estimating the term…
Abstract
Services in a network device are added through providing virtual environments. Virtualization allows services based on other platforms or architectures to be run with minimum modification and in a secure manner. Connecting services to the host through a stateful firewall allows dynamic integration, and passes only traffic of interest to the service. Virtualization allows services written for different instruction architectures to be supported. Multiple virtualized environments each supporting a service may be run.
Claims15
A method of adding a network service to a host device comprising:
- providing a virtual environment to support a service that are not native to the host device,
- executing the service in the virtual environment, and
- connecting the service to the host device through a firewall so that only data needed by the service is passed through the firewall to the service.
A method of adding a network service to a host device having at least one native network service, comprising:
- providing a virtual environment for a third party service to be added, the third party service is a service that cannot be run on a platform supported by the host device;
- executing the third party service to be added in the virtual environment;
- and
- connecting the third party service to be added to the device through a firewall in the host device so that only data needed by the third party service is passed through the firewall to the third-party service.
A non-transitory machine readable medium having a set of instructions stored therein, which when executed on a host device cause a set of operations to be performed, comprising:
- providing a virtual environment to the host device,
- executing a network service in the virtual environment, the network service not being native to the host device, and
- connecting the network service through a firewall in the host device so that only data needed by the network service is passed through the firewall.
Dependencies are inferred from the claim text.