Sun Microsystems, Inc.

Oracle America, Inc.

Broadcom Corporation

Avago Technologies General IP (singapore) Pte. Ltd.

Avago Technologies International Sales Pte. Limited

Open Computing Trust I

Ariel Hendel

Shimon Muller

Michael K Wong

Yatin Gajjar

Karagada Ramarao Kishore

Louise Y Yeung

Leo A Hejza

Nicholas Ilyadis

May Lin

Rahoul Puri

Mohan V Kalkunte

Paul Jeffrey Garnett

Martin Paul Mayhead

Thomas E Giles

Shree Murthy

Howard M Frazier

Gregory Scherer

Xuemin Chen

Puneet Agarwal

Radia Joy Perlman

David R Cheriton

Bruce Hui Kwan

Aly E Orady

James E King

Philippe Klein

Andreas V Bechtolsheim

Hamid Assarpour

Mohammad Kamel Issa

Martin Lund

Peter Heffernan

Daniel R Cassiday

Jochen Behrens

William T Zaumen

Sampath Hosahally Kumar

Curt Berg

Kumaran David Siva

Fu-Kuang Frank Chao

Ian Bruce Bernard Cox

K R Kishore

Ajoy Siddabatuni

Ravi Tangirala

Howard M Frazier, Jr

Rahoul Pun

Raju Penumatcha

Louise Yeung

Leo Hejza

A network-displaced direct storage architecture transports storage commands over a network interface. In one implementation, the architecture maps, at hosts, block storage commands to remote direct memory access operations (e.g., over converged Ethernet). The mapped operations are communicated across the network to a network storage appliance. At the network storage appliance, network termination receives the mapped commands, extracts the operation and data, and passes the operation and data to a storage device that implements the operation on a memory.

Network-displaced direct storage

A network function virtualization security and trust system includes a network device that operates as a virtualized network device with virtualized services provided on the network device by network nodes included in the system. Security and trust within the system can include hardware authentication of the network nodes and the network device to obtain a level of security of the hardware provisioning the operation of the virtualized services. Security and trust can also include authentication of the services being used on the virtualized network device. Services authentication can be based on monitoring and analysis of the cooperative operation of the services in the virtualized network device. The virtualized services can be dynamically changed, added or stopped. Hardware authentication and dynamic services authentication in accordance with changes in the virtualized services can dynamically maintain a level of security across the devices and the virtualized services.

Network function virtualization security and trust system

The present disclosure describes a networking switch of a network and method for operating the networking switch. The networking switch communicates within the network using datagrams, such as packets and/or frames. The frames include packets of a first communication protocol or layer having headers of the first communication protocol or layer. In some situations, the packets of the first communication protocol or layer are embedded with packets of a second communication protocol or layer. Often times, one or more fields of headers of the first communication protocol or layer convey substantially similar or redundant information, such as routing information to provide an example, as one or more fields of headers of the second communication protocol or layer. In these situations, the networking switch can compress the one or more fields of the headers of the first communication protocol or layer

Apparatus and method for packet header compression

A system, method and a computer readable medium for processing packets transmitted using relaxed order in an ordered multi-path network are provided. Packets associated with a data flow from the ordered multi-path network are received out of order. The received packets are reassembled into a sequential order, without gaps, prior to being delivered to a protocol stock for sequential processing.

Relaxed ordering network

Service aware network devices coordinate function chains of virtual functions. The network devices are aware of which virtual functions exist and how to interconnect them in the most efficient manner and define and process service graphs that can be maintained, monitored and redirected. The network devices themselves implement and manage the service graphs, as opposed to the virtual servers that host the virtual functions.

Network based service function chaining on top of rack switches

System, method and apparatus for network congestion management and network resource isolation. A high level network usage and device architecture is provided that can satisfy buffering and network bandwidth resource management for data center networks. The congestion management can be defined to bring the reaction point closer to the network ports. In one embodiment, the reaction point is resident in a network interface card (NIC).

System, method and apparatus for network congestion management and network resource isolation

A system and method for credit-based link level flow control. In one embodiment, a byte-based flow control mechanism is based on a sender effectively maintaining a buffer state at the receiver. In maintaining a buffer state at the receiver, the sender is provided with information regarding byte expansion at the receiver. This byte-expansion information can be used by the sender to identify the amount of additional storage needed by the receiver when storing a packet transmitted by the sender in the receiver's packet buffer.

System and method for credit-based link level flow control

A universal network interface controller (UNIC) is provided for interfacing a host computer to a switch fabric, a packet network, or both. The UNIC includes encapsulation logic configured to encapsulate a CBP communication for transmission as switch fabric data on the switch fabric. Finally, the UNIC includes transmit logic configured to transmit the encapsulated CBP communication to the remote CBP device using the switch fabric.

Universal network interface controller

A method of transferring data in a network is provided. Data is received at a sub-switch of a first bundled switch having a plurality of sub-switches, the sub-switch being configured to only couple to connections external to the first bundled switch. The method also includes transferring the data from the first bundled switch using a multi-lane cable coupled to a second bundled switch, a first end of the multi-lane cable coupled to a sub-switch in the first bundled switch and a second end of the multi-lane cable coupled to at least two sub-switches in the second bundled switch.

Data center switch

Systems and methods for handling virtual machine packets are provided. In some aspects, a method includes receiving, by a network interface controller, an indicator of a packet from a virtual machine. The indicator bypasses a virtual switch coupled to the virtual machine. The method also includes determining, in response to receiving the indicator, whether the packet is designated for accelerated processing. The method also includes providing the indicator to the virtual switch for processing if the packet is determined not to be designated for accelerated processing. The method also includes processing, by the network interface controller, the packet for transmission if the packet is determined to be designated for accelerated processing.

Systems and methods for handling virtual machine packets

Methods and apparatus for communicating data traffic using switch fabric dispersion are disclosed. An example apparatus includes a first tier of switch elements; and a second tier of switch elements operationally coupled with the first tier of switch elements. In the example apparatus, the first tier of switch elements is configured to receive a data packet from a source. The first tier of switch elements is also configured to route the data packet to the second tier of switch elements in accordance with a dispersion function, where the dispersion function is based on a dispersion tag associated with the data packet. The first tier of switch elements is still further configured to transmit the data packet to a destination for the data packet after receiving it from the second tier of switch elements.

Network switch fabric dispersion

A universal network interface controller (UNIC) is provided for interfacing a host computer to a switch fabric, a packet network, or both. The UNIC includes ingress transmit logic designed to transmit switch fabric data in memory associated with the host computer to a switch fabric. The UNIC further includes egress receive logic designed to receive switch fabric data from the switch fabric to store the received switch fabric data in the host memory associated with the host computer. As an option, the ingress transmit logic may be further designed to transmit packet network data in memory associated with the host computer to a packet network, such as Ethernet, and the egress receive logic may be further designed to receive the packet network data from the packet network and to store the received switch fabric data and the received packet network data in the host memory associated with the host computer.

Growing community of inventors

Cupertino, CA, United States of America

Ariel Hendel