F5 Networks, Inc.

Bill Baumann

Paul Imre Szabo

Saxon Carl Amdahl

Peter Michael Thornewell

David Dean Schmitt

Alan B Mimms

Tim S Michels

Qi Lu

Randal Pope

Methods, non-transitory computer readable media, rendezvous gateway (RG) apparatuses, and network security systems that send an RG synchronization message (SYN) to an application in a secure domain following receipt, from a client, of a client SYN comprising an indication of the application. A rendezvous agent (RA) SYN is received, via a firewall coupled to the security domain and in response to the RG SYN, from an RA in the secure domain. A first RG synchronization-acknowledgement message (SYN+ACK) is sent to the client in response to the client SYN. A second RG SYN+ACK is sent, via the firewall, to the RA in response to the RA SYN. The RA is notified of receipt of a client acknowledgement message (ACK) from the client. An RA ACK is received, from the RA and via the firewall, in response to the notification, to thereby establish a full connection between the client and the application.

Methods for secure access to services behind a firewall and devices thereof

A method and system for protection against denial of service attacks to a server coupled to a network. The server may establish connections with client computers through the network. Packets are received over the network directed to the server. It is determined whether the packets are associated with an established connection. The packets associated with the established connection are separated for processing by the server in a first buffer. The packets requesting a new connection are separated in a second buffer. The packets in the second buffer requesting a new connection are serviced at a lower priority than the packets relating to established connections.

Methods and system for DMA based distributed denial of service protection

A method and system for preventing excessive flood packets from switching devices in a network for routing packets between a source station having an address and a destination station in the network having an address. A first packet directed toward the destination station is received over the network via an incoming traffic switch. The incoming traffic switch includes a table without the address of the destination station. The first packet is flooded over the plurality of switches. The flooded first packet is received at a front facing switch coupled to the destination station. The front facing switch has a table including the source address of the packet. The source address of packet is flushed from the table of the front facing switch. A response packet is sent from the destination station to the source station. The response packet is flooded to the incoming traffic switch. The flooded response packet is received at the incoming traffic switch. The table of the incoming traffic switch is updated with the address of the destination station.

Methods and system for solving cross-chip-trunk continuous destination lookup failure

Growing community of inventors

Seattle, WA, United States of America

Bill Baumann