Juniper Networks, Inc.

Guangsong Huang

Yuming Mao

Yan Ke

Lee Chik Cheung

Jian Tong

Roger Jia-Jyi Lian

Yu Ming Mao

Jianhua Gu

Qiang Shen

Si Yuan Tong

Craig Dods

A network device may receive a packet associated with a traffic flow of a session that includes session identification information for the session. The network device may determine to offload subsequent packets associated with the traffic flow using offloading indicators and/or a data model. The network device may store, using a data structure, the session identification information with other session identification information for other sessions that have been selected for offloading, and may provide the packet to a device. The network device may receive another packet associated with the traffic flow, and may determine to offload the other packet by determining that the other packet includes the session identification information. The device may offload the other packet to permit the other packet to traverse through the network device without the network device performing security checks on the other packet, and may provide the other packet to the device.

Intelligent offloading of services for a network device

A device may receive a packet associated with a flow and may identify a capacity indicator associated with a flow table. The capacity indicator may indicate an available storage capacity associated with the flow table. The flow table may be stored by another device and may include entries for one or more flows and one or more corresponding actions to be taken in association with the one or more flows. The device may determine a service indicator that indicates a priority associated with the flow and may compare the capacity indicator and the service indicator. The device may selectively provide a message to the other device based on comparing the capacity indicator and the service indicator. The message may include an instruction for the other device to store an entry, associated with the flow, in the flow table.

Managing flow table entries for express packet processing based on packet priority or quality of service

Methods and apparatus for transferring packets in a packet switched communication system. A system is provided that includes an L2 device including a controller determining for each packet received whether the received packet is to be inspected, an inspection device operable to inspect and filter packets identified by the controller including using a zone specific policy and an L2 controller for transferring inspected packets in accordance with L2 header information using L2 protocols.

Routing a packet by a device

Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet. An input port receives a data packet, a switching board classifies the data packet, determines whether the data packet should be accepted, and switches the data packet to a management board if the data packet is a first data packet in a session, and to a processing board if the data packet is not a first data packet in a session. A management board receives a data packet from the switching board, examines the data packet and forwards the data packet to one of the processing boards. One or more processing boards receives non-first data packets from the switching board and data packets from the management board and processes the data packets. A firewall and a secure gateway with firewall and virtual private network functionality for processing a data packet are also described.

Network security device

Network security device and method

Methods and apparatus for transferring packets in a packet switched communication system. A system is provided that includes an Ldevice including a controller determining for each packet received whether the received packet is to be inspected, an inspection device operable to inspect and filter packets identified by the controller including using a zone specific policy and an Lcontroller for transferring inspected packets in accordance with Lheader information using Lprotocols.

A device described herein may include an input port operable to receive data packets; a switching board operable to classify the data packets, determine whether the data packets should be accepted by the device, and determine whether received data packets are first data packets in a session; a management board operable to receive the data packets from the switching board that were determined by the switching board to be the first data packets in a session; and one or more processing boards operable to receive data packets from the switching board that were determined by the switching board to not be the first data packets in a session and to process the received data packets.

Growing community of inventors

Sunnyvale, CA, United States of America

Guangsong Huang