Hillstone Networks Corp.

Ye Zhang

Dongyi Jiang

Jin Shang

David Yu

Jun Xie

Michael Lin

Juxi Li

Hua Ji

Yu Jia

Qijun Yang

Linyang Shu

Jiangbo Nie

Mike Ji

A method for processing network data traffic includes obtaining a first distributed structure corresponding to a program based on a first storage structure, wherein the program is configured to process network data traffic; dividing a network device based on a second storage structure into a plurality of execution units, wherein the plurality of execution units is configured to execute the program; mapping the first distributed structure and the plurality of execution units to obtain a second distributed structure; and controlling the plurality of execution units to process network data traffic based on the second distributed structure.

Method and device for processing network data traffic based on distributed structure

A processing system includes: a first service machine having a first service module; and a first service switch; wherein the first service machine and the first service switch are configured for logically coupling between virtual machines and a virtual switch; wherein the first service machine comprises a first communication interface and a second communication interface, the second communication interface configured for communication with the first service switch. A processing system includes: a service module; a first communication interface for communication with a virtual switch, the virtual switch configured for communicating with virtual machines; a second communication interface for communication with the virtual switch; the first communication interface being associated with a plurality of VM-based network segments at the virtual switch, the plurality of VM-based network segments corresponding with the plurality of virtual machines, respectively; and wherein the second communication interface is associated with original network segments at the virtual switch.

Service insertion in basic virtual network environment

A method performed by a network appliance having a plurality of application processing units, includes: receiving a first packet at the network appliance; calculating a first value using a mathematical algorithm based on one or more information regarding the first packet; and using the calculated first value to identify a first application processing unit of the plurality of application processing units in the network appliance. A network appliance includes: a plurality of processing units that are communicatively connected to each other; wherein a first processing unit of the plurality of processing units is configured for: calculating a first value using a mathematical algorithm based on one or more information regarding a first packet; and using the calculated first value to identify a second processing unit of the plurality of processing units.

Distributed network firewall and flow-based forwarding system

A method performed by a network system having a plurality of processing units implemented using a plurality of respective virtual machines, includes: receiving a first packet at a first virtual machine of the plurality of virtual machines, wherein the first virtual machine is configured to receive the first packet from a network through an interface and has session processing capability; calculating a first value using a mathematical algorithm based on one or more information regarding the first packet; and using the calculated first value to identify a second virtual machine of the plurality of virtual machines in the network system.

Distributed virtual security appliance and flow-based forwarding system using virtual machines

Growing community of inventors

Sunnyvale, CA, United States of America

Ye Zhang