A 10 Networks, Incorporated

Michael Friedel

Hasnain Karampurwala

Gurudeep Kamat

A method for routing Internet traffic is disclosed. The method comprises receiving an IPv6 packet. Further, the method comprises determining if the IPv6 packet comprises an extension header with geo-location information. Finally, responsive to a determination that the IPv6 packet comprises an extension header with geo-location information, the method comprises performing an action based on the geo-location information, wherein the action is selected from the group consisting of: authenticating the IPv6 packet, prioritizing the IPv6 packet relative to other packets, routing the IPv6 packet, and monitoring of the IPv6 packet.

Applications of processing packets which contain geographic location information of the packet sender

A method for performing Layer 3 direct server return is disclosed. The method comprises receiving an IP packet from a client device over a communication network. Further, the method comprises extracting a virtual IP address from a destination header field of the IP packet. Subsequently, the method comprises determining a server to which to forward the IP packet and inserting an IP address of the server in the destination header field of the IP packet. Next, the method comprises inserting the virtual IP address in an extension header for the IP packet. Finally, in one embodiment, the method comprises transmitting the IP packet to the server over the communication network.

Use of packet header extension for layer-3 direct server return

Disclosed are methods and systems for providing a mobile signaling channel during a distributed denial of service (DDoS) attack. An example method for providing a mobile signaling channel during a DDoS attack may include communicatively coupling a mobile device to a DDoS device protecting upstream data communications during the DDoS attack. The mobile device may be operable to signal the DDoS attack via the mobile signaling channel. Furthermore, the method may include determining that a capacity of a primary signaling channel associated with the DDoS device is below a predetermined threshold capacity. The method may further include activating signaling of the DDoS attack by the mobile device via the mobile signaling channel. The activation may be performed based on the determination that the capacity of the primary signaling channel associated with the DDoS device is below the predetermined threshold capacity.

Distributed denial of service cellular signaling

A method for providing geo-location information in a communication packet is disclosed. The method comprises constructing an IPv6 packet using a client device. Further, the method comprises inserting an extension header into the IPv6 packet. Also, the method comprises determining geo-location information. Next, the method comprises inserting the geo-location information into the extension header. Finally, the method comprises transmitting the IPv6 packet to a communication network.

Growing community of inventors

Alexandria, VA, United States of America

Michael Friedel