Juniper Networks, Inc.

Netflix Inc.

Jonathan T Looney

John Galen Scudder

Kireeti Kompella

Zhaohui Zhang

Ronald P Bonica

Reji Thomas

Andrew Chen

Pranavadatta Devaki Narasimha Bhatta

Ronald Bonica

Satish Dattatri

In various embodiments, servers in a server pool share a centrally-generated encryption key that is used to encrypt session keys in tickets that can be used by client applications to share secure communication sessions across different servers belonging to the same server pools. When the client application first establishes a secure communication session with a server in a server pool, the server returns a ticket that includes an encrypted version of a session key generated using an encryption key shared by servers in the server pool. Thereafter, the client application can present the ticket to other servers in the server pool to restore the secure communication session with the other servers. Associations between servers and server pools can be communicated to the client application in any technically feasible manner, such as part of information indicating servers from which content can be accessed or via the Domain Name System (DNS).

Techniques for sharing secure communication sessions within a computer network

A network node may include one or more processors. The one or more processors may receive a message that is associated with one or more signatures and one or more second signatures. The one or more signatures may have been validated by a particular node. The one or more processors may determine that the particular node is a trusted node. The network node may be configured not to validate signatures that have been validated by a trusted node. The one or more processors may determine that the one or more signatures have been validated by the particular node. The one or more processors may sign or provide the message, without validating the one or more signatures, based on determining that the one or more signatures have been validated by the particular node.

Selective verification of signatures by network nodes

The disclosed computer-implemented method may include (1) providing a framework that includes (A) a user-space component and (B) a kernel-space component, (2) identifying, via the user-space component, a series of kernel functions to be tested in kernel space, (3) identifying, via the user-space component, one or more arguments for the series of kernel functions to be tested in kernel space, and then (4) performing, via the user-space component, unit testing of a kernel from user space by (A) generating at least one message that identifies the series of kernel functions and the arguments and (B) sending the message to the kernel-space component to direct the kernel-space component to (I) populate a queue in kernel space with the series of kernel functions and the arguments and (II) sequentially execute the series of kernel functions in the queue with the arguments. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for unit testing of operating system kernels from user space

The disclosed computer-implemented method for forwarding network traffic using minimal Forwarding Information Bases (FIBS) may include (1) identifying a Routing Information Base (RIB) that includes a set of routes that define paths to destinations both inside and outside a network and then (2) creating a FIB that includes a subset of active routes whose size is below a size threshold by (A) importing, from the set of routes within the RIB, (I) internal routes that define paths to destinations inside the network, (II) high-traffic external routes that define paths to destinations outside the network, and (III) a default route that defines a path to a default node that facilitates resolution of traffic that does not match any of the internal or high-traffic external routes and (B) excluding, from the FIB, low-traffic external routes that define paths to destinations outside the network. Various other methods, systems, and apparatuses are also disclosed.

Method, system, and apparatus for forwarding network traffic using minimal forwarding information bases

The disclosed computer-implemented method may include (1) providing a framework that includes (A) a user-space component that runs at a client site and (B) a kernel-space component that runs at a remote site, (2) identifying attributes of objects that reside at the remote site and whose addresses are unknown at the client site, (3) generating a script to test a function of a kernel running on the remote site based at least in part on the attributes, and (4) performing a remote unit testing of the function of the kernel by executing the script such that the user-space component (A) generates a message that identifies the attributes and (B) sends the message to the kernel-space component to facilitate (I) obtaining references to the objects by way of the attributes and (II) invoking the function by way of the references. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Syracuse, NY, United States of America

Jonathan T Looney