Riverbed Technology, Inc.

Google Inc.

Adityashankar Kini

David Tze-Si Wu

Nitin Gupta

Ekanth Sethuramalingam

Huy T Nguyen

Vivasvat Keswani

Shashidhar Merugu

Ashish Garg

Kartik Subbanna

Adam Licata

James Paul Black

Dwaipayan Dutta

Powell Molleti

John Milford

Dilip Kumar Uppugandla

Vinay Perneti

Daniel Conor O'Sullivan

Chinmaya Manjunath

Steven James Procter

Systems and methods include identifying fields associated with a log event of telemetry data and, for each field, selecting a key from multiple keys and generating a field-key mapping that includes a mapping from the fields to the selected key. The systems and methods generate an event log parser extension that includes the field-key mappings and validate the parser extension by testing its performance on sample log events. The systems and methods then execute a base parser and the validated event log parser extension on event logs to convert the event logs into a standardized format and perform data analytics on the standardized event logs to identify trends in the event logs and identify possible threats.

Augmenting parsers by added parser stages

Transparent network devices intercept unidirectional network traffic and use bidirectional network protocol messages to discover each other and configure an inner connection. A first transparent network device intercepting unidirectional network traffic between a source and destination will send a bidirectional network protocol message addressed to the destination that includes an indicator of its presence. Additional transparent network devices that intercept this network message each add their own indicator to the message. If no response to the bidirectional network message is received, an error message is received, or a response message is received directly from the destination by one of the transparent network devices, this additional transparent network device deduces that it is the closest transparent network device to the destination and sends a response message addressed to the source that includes an indicator of its presence. The first transparent network device receives the response message and establishes an inner connection.

Connecting transparent network devices to optimize unidirectional network traffic

Virtual storage arrays consolidate branch data storage at data centers connected via wide area networks. Virtual storage arrays appear to storage clients as local data storage; however, virtual storage arrays actually store data at the data center. Virtual storage arrays overcome bandwidth and latency limitations of the wide area network by predicting and prefetching storage blocks, which are then cached at the branch location. Virtual storage arrays leverage an understanding of the semantics and structure of high-level data structures associated with storage blocks to predict which storage blocks are likely to be requested by a storage client. Virtual storage arrays may use proximity-based, heuristic-based, and access time-based prefetching to predict high-level data structure entities that are likely to be accessed by the storage client. Virtual storage arrays then identify and prefetch storage blocks corresponding with the predicted high-level data structure entities.

Virtualized data storage system optimizations

The file creation on remote data storage accessible via a WAN can be optimized by creating temporary files in advance on a remote data storage. The file handles or other file access parameters for these temporary files are cached at a client network location. A file creation request from a client is intercepted at the client network location and one of the cached file handle is returned to the client. This enables the client to immediately write data to the corresponding temporary file, avoiding the delay incurred by communicating the file creation request and its response over a WAN. One or more storage commands are sent to the remote data storage to change the attributes of the temporary file to match those requested by the client, such as the file name, directory, and/or file permissions. File creation requests may be selectively optimized according to rules or criteria specified by users.

Optimized file creation in WAN-optimized storage

Systems and techniques are described for load balancing between WAN optimization devices. During operation, a mapping is determined based solely or partially on capacities of a set of remote WAN optimization devices and capacities of a set of local WAN optimization devices, wherein the mapping maps each remote WAN optimization device to a local WAN optimization device. Next, connection requests are directed to WAN optimization devices based on the mapping.

Method and apparatus for load balancing between WAN optimization devices

Access to compound data over a wide-area network is optimized by analyzing metadata within compound data to identify internal and external data streams to be prefetched. Upon receiving or intercepting a network packet including an access request for a data resource, metadata in this data resource is analyzed to identify associated data streams and their storage locations within and/or outside of the data resource. Data streams may be proactively or reactively prefetched. Proactive prefetching identifies and retrieves data streams or portions thereof likely to be accessed by a client based on attributes associated with the data resource. Reactive prefetching identifies portions of data streams associated with received access requests and retrieves additional portions of these data streams. Prefetched data streams or portions thereof are stored in a data storage on the same local network or near to the local network including the client.

Optimized prefetching of compound data

In a system where transactions are accelerated with asynchronous writes that require acknowledgements, with pre-acknowledging writes at a source of the writes, a destination-side transaction accelerator includes a queue for queue writes to a destination, at least some of the writes being pre-acknowledged by a source-side transaction accelerator prior to the write completing at the destination, a memory for storing a status of a destination-side queue and possibly other determinants, and logic for signaling to the source-side transaction accelerator with instructions to alter pre-acknowledgement rules to hold off on and pursue pre-acknowledgements based on the destination-side queue status. The rules can take into account adjusting the flow of pre-acknowledged requests or pre-acknowledgements at the sender-side transaction accelerator based at least on the computed logical length.

Throttling of predictive ACKs in an accelerated network communication system

Growing community of inventors

San Carlos, CA, United States of America

Adityashankar Kini