Juniper Networks, Inc.

Beijing Bytedance Network Technology Co., Ltd.

Yan Zhuang

Yong Tian

Dongyi Jiang

Nan Chen

Xiao Ping Zhu

Haiyu Wang

Jinfeng Yu

Shuzhen Cao

Rakesh Nair Gopala Krishnan Nair

Lebing Wan

Provide are a session synchronization method, a session synchronization apparatus, a session synchronization system, a first node, a second node, and a medium. The session synchronization method includes sending a first negotiation message to at least one node in a cluster through a first central processing unit (CPU) core and determining a second node according to at least one received second negotiation message; sending a third negotiation message to the second node through the first CPU core; in the case where a fourth negotiation message sent from the second node is received through the first CPU core, receiving the user datagram protocol (UDP) message sent from the second node through a second CPU core; and synchronizing the session of the second node according to the UDP message through the second CPU core.

Session synchronization method, apparatus and system, and first node, second node and medium

In general, techniques are described for performing decentralized packet dispatch. A network device comprising one or more service processing units (SPUs) and an interface may implement the techniques. The interface receives a packet associated with a session and selects a first one of SPUs to dispatch the packet based on first information extracted from the packet. The first one of the SPUs dispatches the packet to a second one of the SPUs based on second information extracted from the packet. The second one of the SPUs performs first pass processing to configure the network security device to perform fast path processing of the packet such that second one of the SPUs applies one or more services to the packet and subsequent packets associated with the same session without application of services to the packets by the first one of the service processing units.

Decentralized packet dispatch in network devices

In general, techniques are described for performing distributed network address translation (NAT) with a network device. The network device includes an interface card and a control unit. The interface card receives a packet including a source address. The control unit includes NAT modules. each of which stores a local pool of unallocated NAT resources that have not yet been allocated for use in performing network address translation. The NAT resources each include a network address and a network port number. One of the NAT modules receives the packet, determines whether any of the NAT resources from the local pool of NAT resources are available, in response to the determination that none of the NAT resources from the local pool of NAT resources are available, requests additional NAT resources, and performs NAT to obscure the source address of the packet using one of the additional NAT resources to generate a modified packet. The interface card forwards the modified packet.

Distributed network address translation in computer networks

Growing community of inventors

Beijing, China

Yan Zhuang