Sun Microsystems, Inc.

Genband US LLC

Paul Phillips

Ian Alexander Macfarlane

Sumit Garg

Brian Ramelson

John Edward DeRoo

Robert M Supnik

Stephen D Metzger

Mark E Pawela

Venu G Moogala

David A Choiniere

Darren J Hayduk

Timothy J Knight

David S Caplan

Eric Carbonneau

Michael Banatt

Rajesh Vaidheswarra

Steve Metzger

Jason Christopher Terry

Stephen Metzger

Rajesh Vaidheeswarra

System, methods, and computer program products are provided for configuring a computing system that processes messages according to the Session Initiation Protocol (SIP). The method includes defining, by a scripting-type computer processing language, one or more variables, where each variable is configured to store state data based on at least a portion of a SIP message and is associated with the SIP message flow. Once configuration is complete, a series of SIP messages belonging to the SIP message flow is received by the computer system. As each SIP message in the series is received, each SIP message is processed where the message processing includes modifying the state data stored in at least one of the variables based on data included in the respective SIP message.

Systems and methods for customizing SIP message processing

Systems, methods, and computer program products are provided for modifying a Session Initiation Protocol (SIP) messages. The method includes providing a scripting-type computer programming language that includes contexts that reference pre-defined portions of data of a SIP message and variables that store data associated with a SIP message flow. An interface for configuring rules to be executed when processing SIP messages is provided. Each rule includes an action that describes a modification to be made to a particular SIP message. When a SIP message is received, it is parsed to determine at least a context of a portion of the message. The parsing includes associating the portion of the message with a particular context. It is then determined whether a rule should be applied to the data associated referenced by the contexts, and if so, the SIP message is modified based on the actions associated with the rule.

Systems and methods for processing SIP message flows

Systems, methods, and computer program products are provided for providing context through a scripting-type programming language to data included in a SIP message. The method includes defining one or more contexts through a scripting-type computer programming language. The one or more contexts reference a particular pre-defined portion of a SIP message and are provided by the scripting-type computer programming language. A series of SIP messages may then be received, where each SIP message in the series belongs to the same SIP message flow. After a particular SIP message in the series is received, the message is parsed to identify whether it includes any portion of data that can be referenced via one or more contexts. Any particular portion of data that can be referenced via a context is associated with a respective context such that the respective portion of data can be referenced by the context.

Systems and methods for providing context to SIP messages

Methods, systems, and computer readable media for utilizing a standard spanning tree protocol to designate an active switching device in a network node are disclosed. In one example, the method includes generating a virtual network topology representation that includes a payload processing device connected to each of a first switching device and a second switching device, transmitting, from each of the first and second switching devices to the payload processing device, a standard spanning tree protocol signaling message that contains the virtual network topology representation and a bridge root priority identifier that has been derived using an algorithm that considers whether the transmitting switching device is a preferred active switching device or a preferred standby switching device, and signaling messages at the payload processing device to select the preferred active switching device as a root bridge of a logical spanning tree based on comparing bridge root priority identifiers.

Methods, systems and computer readable media for utilizing a standard spanning tree protocol to indicate an active switching fabric in a network node

A single management facility in a virtualized system that facilitates the presentation of either a virtual element view or system view to a network management user depending upon the user's access rights is disclosed. The view presented to the user is modified based on the scope and type of access rights, which are found in a profile object, that is stored in an environmental object, established during the user login. Each virtualized element in the system includes management information that is associated with the virtual element via a virtual identifier. The management information indicates the level of the user access rights necessary to view the associated virtual element. Requests by a user to access management information associated with a virtual element are analyzed to determine if the access rights specified in the user profile enable the user to access the information associated with the virtual element.

Embedded management system for a physical device having virtual elements

Methods and systems for load balancing a plurality of entities, such as firewalls, in a network environment are disclosed. In particular, the load balancing of firewalls on a bidirectional traffic path is performed using a single device that controls both incoming and outgoing traffic through the firewalls. The single device may include virtual routers for controlling the bidirectional traffic through the firewalls. A first virtual router may control incoming traffic to the firewalls and the other virtual router may control outgoing traffic to the firewalls. The virtual routers are logical partitions of the device layered on the physical resources of the device. The virtual routers share all or portions of the physical resources of the single device.

Firewall load balancing using a single physical device

In one general aspect, a network communication unit is disclosed that includes a cryptographic record parsing offload engine that has an input and an output. The unit also includes a processor that includes cryptographic handshake logic and has an input operatively connected to the output of the cryptographic record parsing offload engine.

Secure network processing

In one general aspect, a stream-based memory circuit is disclosed that includes physical storage elements and at least a first physical access port. A stream-based access controller is operatively connected to the physical storage elements and to the access port. The controller includes function-specific hardware logic operative to access data as streams in the physical memory in response to stream-based access commands at the access port.

Growing community of inventors

Westboro, MA, United States of America

Paul Phillips