Apple Inc.

Other

Dieter W Siegmund

Cahya Adiansyah Masputra

Vincent Lubet

Mitchell David Adler

Dallas Blake De Atley

Nitin Ganatra

Conrad Sauerwald

Michael Lambertus Hubertus Brouwer

Curtis Galloway

Stan Jirman

Matthew Reda

Christophe Allie

Roberto G Yépez

Kapil Chhabra

Franco Travostino

Sandeep Nair

Wei Shen

Darrin Jewell

Daniel Lertpratchya

A device implementing an adaptive wide area network (WAN) link assessment system may include a processor configured to transmit data to a WAN over a first link on a first wireless interface. The processor may be configured to, responsive to a determination based on connection information that a first escalation condition is satisfied, configure the first link to provide expanded connection information. The processor may be configured to, responsive to a second determination based on the expanded connection information that a second escalation condition is satisfied, perform a probe operation with respect to a server on the WAN over the first link. The processor may be further configured to, when the probe operation is not successfully completed within a predetermined amount of time, begin to transmit the data to the WAN over the second link on the second wireless interface.

Adaptive wide area network link assessment

Methods and apparatus for efficient data transfer within a user space network stack. Unlike prior art monolithic networking stacks, the exemplary networking stack architecture described hereinafter includes various components that span multiple domains (both in-kernel, and non-kernel). For example, unlike traditional 'socket' based communication, disclosed embodiments can transfer data directly between the kernel and user space domains. Direct transfer reduces the per-byte and per-packet costs relative to socket based communication. A user space networking stack is disclosed that enables extensible, cross-platform-capable, user space control of the networking protocol stack functionality. The user space networking stack facilitates tighter integration between the protocol layers (including TLS) and the application or daemon. Exemplary systems can support multiple networking protocol stack instances (including an in-kernel traditional network stack).

Methods and apparatus for preventing packet spoofing with user space communication stacks

Systems and methods relating to managing network addresses. In one implementation, a method is provided. The method includes sending a first request to use a particular network address, sending one or more second requests for respective hardware addresses corresponding to network addresses of one or more network address leases. When a hardware address corresponding to a particular network address lease is received in response to one of the one or more second requests and an acknowledgement of the first request to use the network address is not received determining whether the network address identified by the lease is the same as the network address in the first request, and when the network address is not the same, sending a third request to use the identified network address corresponding to the lease.

Network management

A method for configuring a device includes receiving a first configuration profile comprising a first configuration and a first certificate and a second certificate, verifying the first configuration profile with the first certificate, receiving a user input indicating to accept the first configuration profile, configuring the device according to the first configuration, receiving a second configuration profile comprising a second configuration, verifying the second configuration profile with the second certificate and updating the device according to the second configuration, wherein the user is unaware of the updating.

Secure device configuration profiles

A method is described that involves associating an outbound packet with a first network interface and constructing a search key from an identifier of the first network interface and the outbound packet's destination address. The method further entails submitting the search key to a routing function where the routing function identifies the outbound packet's next hop address. The method also involves transmitting the outbound packet to a node identified by the next hop address from the first network interface.

Outbound transmission of packet based on routing search key constructed from packet destination address and outbound interface

One embodiment of the present invention provides a system that wakes up a sleeping target system located on a target LAN (Local Area Network) from a remote system located on a remote LAN. Because the sleeping target system is in a sleep state, it receives packets of a lower-layer protocol which cannot be used by the remote system to directly send packets to the sleeping target system. During operation, the remote system creates a wake-up packet. The remote system then uses a second protocol to send the wake-up packet to a relay agent located on the target LAN. Upon receiving the first wake-up packet, the relay agent uses the lower-layer protocol to send a second wake-up packet to the sleeping target system, which causes the sleeping target system to wake up.

Method and apparatus for waking up a sleeping system

A method is described that entails assigning a source network address to an outbound packet, associating the outbound packet with a network service and identifying a first network interface associated with the network service. The method further entails inquiring into and confirming that the first network interface is associated with the source network address. The method further entails constructing a search key from an identifier of the first network interface and the outbound packet's destination address. The method further entails submitting the search key to a routing function, the routing function providing the outbound packet's next hop address. The method further entails transmitting the outbound packet to a node identified by the next hop address from the network interface.

Source address based routing process

A routing table lookup algorithm is described that, for a first outbound packet, performs a first route lookup into the routing table with a first search key that includes the first packet's destination address and a first network interface identifier, and, for a second outbound packet, performs a second route lookup into the routing table with a second search key that includes the second outbound packet's destination address but does not include any network interface identifier.

Routing table lookoup algorithm employing search key having destination address and interface component

A method is described that involves, in view of a first default entry for a first subnet that is reachable through a first network service, where the first default entry has a numeric destination value, and in view of a second default entry for a second subnet that is reachable through a second network service, wherein the second default entry has the numeric destination value, sorting the first and second default entries by deciding that the first network service is ranked higher than the second network service. The method further involves configuring the first default entry within a routing table to have the numeric destination and not an interface component within the first default entry's search term, and, configuring the second default entry within the routing table to have the numeric destination and the second network service's interface component within the second default entry's search term.

Routing table build algorithm for a routing table that uses a search key constructed from packet destination address and outbound interface

Routing table lookup algorithm employing search key having destination address and interface component

Methods, computer program products, systems and data structures for generating a signature for a network are described. A network signature may include, for example, network information associated with a network (e.g., IP address, MAC address, domain name, DNS name, routing information, phone number, etc.). A signature of a network that has previously been created can be stored to enable identification of the network in the future and to record parameters, settings, properties and attributes previously used for that network.

Growing community of inventors

Santa Cruz, CA, United States of America

Dieter W Siegmund