The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Oct. 13, 2020
Filed:
Sep. 24, 2019
Illumio, Inc., Sunnyvale, CA (US);
Thomas Michael McCormick, San Jose, CA (US);
Daniel Richard Cook, San Jose, CA (US);
Rupesh Kumar Mishra, Santa Clara, CA (US);
Matthew Kirby Glenn, Mountain View, CA (US);
Paul James Kirner, Palo Alto, CA (US);
Mukesh Gupta, Fremont, CA (US);
Juraj George Fandli, Campbell, CA (US);
Illumio, Inc., Sunnyvale, CA (US);
Abstract
An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.