Facebook, Inc.

Riverbed Technology, Inc.

Puneet Mehra

Huapeng Zhou

Kumar V Thangavelu

Zequn Huang

Anant Deepak

Aditya Jayaraman

Nikita Shirokov

Tim Z W Chen

The disclosed computer-implemented method may include (i) configuring a packet filtering policy at least in part by defining an attribute map and a set of network-packet filtering rules that use logical groupings of distinguishing attributes as input parameters, (ii) after configuring the packet filtering policy, receiving an incoming network packet, (iii) extracting distinguishing attributes from the incoming network packet, (iv) translating, based on the attribute map, the distinguishing features extracted from the incoming network packet into logical groupings associated with the network packet, and (v) applying the packet filtering policy to the incoming network packet by using the logical groupings associated with the network packet as input parameters to the filtering rules. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for high-efficiency network-packet filtering

Systems and techniques are described for optimizing secure communications. A client can use an authentication protocol, e.g., Kerberos, to authenticate with the server. Specifically, the client can obtain a service ticket from a ticket granting server, and then use the service ticket to authenticate with the server. The server can respond by providing an encrypted session key. The session key can then be used by the client and server to securely communicate with each other. A wide area network (WAN) optimization device described in this disclosure is capable of obtaining the session key without decrypting the service ticket. Specifically, the WAN optimization device can use information other than the service ticket to obtain the session key.

Optimizing secure communications

Growing community of inventors

Alameda, CA, United States of America

Puneet Mehra