Cisco Technology, Inc.

Vmware, Inc.

Michael Lee Hall, Jr

Mukund Trimbak Ingle

Emily Hong Xu

Kevin L Wiley

Sridevi Ravuri

Rajesh Agarwalla

Yateendra Kulkarni

Munawar Hossain

Sushil Shripal Munot

Venkat Deep Rajan

Andrew T Chin

Hasan Mahmood

Joseph M Sirrianni

A system and method for supplying on-premise hyper-converged systems uses a cloud service to receive orders for the on-premise hyper-converged systems from customers and to request a system integrator to procure hardware components of the on-premise hyper-converged systems and to assemble hardware components to produce assembled systems. Software components are remotely installed and configured in the assembled systems from the cloud service using bring-up appliances in virtual private clouds created for the on-premise hyper-converged systems to deploy software-defined data centers (SDDCs) in the on-premise hyper-converged systems. The resulting on-premise hyper-converged systems with the deployed SDDCs can then used by the customers.

System and method for supplying on-premise hyper-converged systems

Embodiments of the disclosure may be used to optimize communications between a first routing device and a second routing device. The first routing device may receive a packet for forwarding towards a destination. The first routing device may modify the packet to announce the presence of the first routing device to other routing devices. Thereafter, a second routing device may receive the modified packet and recognize the presence of the first routing device. In turn, when sending a packet back towards a source address identified in the modified packet, the second routing device may modify such a packet to announce the presence of the second routing device to the first routing device. Thereafter, the first and second routing device may optimize traffic between the first and second routing device.

Transparent network service enhancement

Embodiments of the invention may be used to optimize communications between a first routing device and a second routing device. The first routing device may receive a packet for forwarding towards a destination. The first routing device may modify the packet to announce the presence of the first routing device to other routing devices. Thereafter, a second routing device may receive the modified packet and recognize the presence of the first routing device. In turn, when sending a packet back towards a source address identified in the modified packet, the second routing device may modify such a packet to announce the presence of the second routing device to the first routing device. Thereafter, the first and second routing device may optimize traffic between the first and second routing device.

In accordance with one embodiment of the present invention, a method for inline intrusion detection includes receiving a packet at a physical interface of an intrusion detection system. The packet is tagged with a first VLAN identifier associated with an external network. The network further includes buffering the packet at the physical interface, communicating a copy of the packet to a processor, and analyzing the copy of the packet at the processor to determine whether the packet includes an attack signature. The method also includes communicating a reply message from the processor to the interface indicating whether the packet includes an attack signature. If the packet does not contain an attack signature the buffered copy of the packet is re-tagged with a second VLAN identifier associated with a protected network and re-tagged packet is communicated to the protected network.

Inline intrusion detection using a single physical port

Growing community of inventors

Austin, TX, United States of America

Michael Lee Hall, Jr