Cisco Technology, Inc.

Sonoa Networks India (pvt) Ltd.

Telefonaktiebolaget Lm Ericsson (publ)

Kousik Nandy

Ramesh Nethi

Ravi Kumar Vadapalli

Daniel Khoe

Pratima Pramod Sethi

Manikchand Roopchand Bafna

Madhavan Jayabalan

Shashidhar P Patil

Arnab Choudhury

Iain Maclachlan Hamilton

Ganesan Vivekanandan

The present technology addresses a need to automatically configure a new compute resource to join an existing cluster of computing resources. The present technology provides a mechanism to ensure that the new compute resource is executing the same kernel version which further permits subsequent exchange at least one configuration message informing the new compute resource of necessary configuration parameters and an address to retrieve required software packages.

Extending center cluster membership to additional compute resources

Techniques are described for providing an application programming interface (API) architecture that is capable of supporting cross-site request forgery (CSRF) protection with an attribute flag in a cookie, for client devices that utilize a stateless user session to interface with an API gateway. A client device may transmit session requests received by an API gateway. The API gateway may generate a session, and a cookie including session properties associated with the session. The cookie may further include the attribute flag associated with a CSRF token. By transmitting the cookie with the attribute flag to the client device, the client device may receive and insert the cookie into subsequent requests to indicate a requirement that the subsequent requests be accompanied by the CSRF token. In this way, the API gateway may utilize the attribute flag indicating the requirement for the CSRF token to protect the client device from malicious attacks.

Cross site request forgery (CSRF) protection for web browsers

A method is implemented by a network device for improving availability of network component using multi-chassis redundancy by efficiently re-routing data traffic intended for the network component in the event of a link or node failure. The network device is in a set of network devices hosting the network component each network device in the set of network devices having a shared cluster identifier and a separate node identifier. The set of network devices hosting the network component share a virtual internet protocol address.

Method for multi-chassis redundancy using anycast and GTP TEID

A method and system for learning network information through a plurality of network devices is provided. The plurality of network devices are configured for IPsec. The method enables negotiation between the network devices to set up a security association and provide network information between the configured network devices. This network information includes a plurality of sub-network routes.

Method and system for learning network information

Modifying a partially parsed Extensible Markup Language (XML) document. A stop node in an XML document is marked using at least one stop XPath expression. The XML document is then parsed till the stop node identified by the at least one stop XPath expression. Modifications to the XML document are specified in a modification script, including at least one modification instruction. A modification instruction includes a context node XPath expression which identifies a context nodeset requiring modifications, and the actual modification content. Sequence of event tokens corresponding to the parsed XML document are then stored. Further, the XML document is modified according to the modification script.

System and method for partial parsing of XML documents and modification thereof

A method and system for efficient processing of structured documents is provided. The method includes creating fragments of the structured document. The method also includes creating an ordered list including a plurality of descriptors pointing to the structured document fragments. Further, the method includes modifying the ordered list for manipulating of the structured document. The system includes one or more message blocks. The system also includes a message control block for pointing to the one or more message blocks. Further, the system includes one or more data blocks and a plurality of binary tokens for pointing to the one or more data blocks. Moreover, the system includes a plurality of ordered lists of descriptors.

Efficient storage and manipulation of structured documents

Classifying Uniform Resource Identifier (URI) expression using one or more XPath expressions. A request comprising a URI expression and additional network information is modeled as a logical XML document representation. One or more XPath expressions are then created from the schema of the logical XML document. Each of the one or more XPath expressions represents a classification category of the request. Further, an XML document is generated from an incoming request. One or more XPath expressions are evaluated on the XML document for classifying the incoming request.

Classifying uniform resource identifier (URI) using xpath expressions

An end machine (connected to one end of secure connection) may reliably continue to use the security association (SA) even if the self_address (usually the address of the interface) of the end machine changes. The end machine includes the new IP address in the payload of a packet (e.g., an address update message) sent to another end machine at the other end of the connection. The payload can be encrypted and authenticated to avoid third party attacks. As a result, connectivity can restored for user applications reliably and quickly without requiring substantial computations and/or data exchanges.

Growing community of inventors

Bengaluru, India

Kousik Nandy