Intel Corporation

Lightbits Labs Ltd.

Fabian Trumper

Avigdor Dori Eldar

Shmuel Ben-Yehuda

Eran Kirzner

Ofir Efrati

Sagi Grimberg

Zvi Vlodavsky

Ziv Tishel

Ariel Rosenblatt

Abel Alkon Gordon

Moshe Valenci

A field programmable gate array (FPGA), that includes a trusted FPGA logic, an untrusted FPGA logic and a monitor; wherein the monitor is configured to monitor the untrusted FPGA logic and prevent the untrusted FPGA logic from violating predefined constrains imposed on an operation of the untrusted FPGA logic; wherein the predefined constraints are stored in a memory region of the FPGA that is not accessible to the untrusted FPGA logic.

Storage system having a field programmable gate array

A method for accessing a storage system, the method may include receiving a block call, from a processor that executes an application and by a storage engine of a computer that is coupled to a storage system; generating, by the storage engine and based on the block call, a key value call; and sending the key value call to a key value frontend of the storage system.

Storage system and a method for application aware processing

A storage system that includes an in-line hardware accelerator, a solid-state drive (SSD) unit, a central processing unit (CPU), a volatile memory module, and an accelerator memory module that is coupled to the in-line hardware accelerator or belongs to the in-line hardware accelerator; wherein the in-line hardware accelerator is directly coupled to the SSD unit, the volatile memory and the non-volatile memory; wherein the CPU is directly coupled to the volatile memory and to the non-volatile memory; wherein the in-line hardware accelerator is configured to manage access to the SSD unit; wherein the in-line accelerator is configured to retrieve data stored in the volatile memory module and the non-volatile memory module without involving the CPU.

Storage system having an in-line hardware accelerator

A capability of a device may be registered to an adapter. This capability may characterize the device in terms of tasks performing abilities that may be available or associated therewith. When a packet of data including a task to be handled is received at the adapter, based on the capability registered earlier for the device, the adapter may determine whether to assign the task to the device. An indication, such as packet processing information may be derived from the packet to assist in distribution of the task. By comparing the indication with the capability, the task may be offloaded to the device based on the comparison. Using the device for a networked device, in one embodiment, one or more network communication tasks associated with data communications may be distributed and optionally performed within an adapter. In this way, the networked device may be spared of undertaking network communication tasks that are conventionally performed within the networked device.

Distributing tasks in data communications

Apparatus and systems, as well as methods and articles, may operate to control a security state associated with one or more network node(s) using a master heuristic policy enforcement module associated with a network firewall, and to selectively re-direct first packets to the network firewall from a remotely manageable network controller located within the network node(s) based upon the security state.

Hybrid distributed firewall apparatus, systems, and methods

A method to redirect data packets by a network controller to a network node. A network interface routes a data packet from the network node. Another network interface redirects the data packet from the network node. A switch selects between the two network interfaces based upon the state of the network node.

Method for packet encapsulation and redirection of data packets

A method, apparatus, and article for caching security records for access by a hardware offloading device are disclosed. A method for updating security record entries in a hardware table is disclosed that includes marking every security record entry in the hardware table as a replacement candidate based upon passage of a determined time interval, each security record entry having a set of security parameters. Upon receiving a packet having a security record, the hardware table is checked for a security record entry corresponding to the security record. A check is done to determine whether there is a replacement candidate in the hardware table if there is no security record entry corresponding to the security record. The security record entry containing the replacement candidate is replaced with the security record if there is a replacement candidate. Other embodiments are described.

Growing community of inventors

Modiin, Israel

Fabian Trumper