The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Feb. 03, 2026

Filed:

Apr. 15, 2015
Applicant:

Vmware Llc, Palo Alto, CA (US);

Inventors:

Teemu Koponen, San Francisco, CA (US);

Ronghua Zhang, San Jose, CA (US);

Pankaj Thakkar, Santa Clara, CA (US);

Martin Casado, Portola Valley, CA (US);

Assignee:

VMware LLC, Palo Alto, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 9/455 (2018.01); G06F 15/177 (2006.01); H04L 9/40 (2022.01); H04L 41/08 (2022.01); H04L 41/0803 (2022.01); H04L 41/0806 (2022.01); H04L 41/0813 (2022.01); H04L 41/0823 (2022.01); H04L 41/0894 (2022.01); H04L 41/0895 (2022.01); H04L 45/64 (2022.01); H04L 45/74 (2022.01); H04L 49/00 (2022.01); H04L 61/2503 (2022.01); H04L 61/2517 (2022.01); H04L 61/2521 (2022.01); H04L 61/256 (2022.01); H04L 67/1008 (2022.01); H04L 45/02 (2022.01); H04L 49/15 (2022.01);
U.S. Cl.
CPC ...
G06F 9/45558 (2013.01); G06F 9/455 (2013.01); G06F 9/45533 (2013.01); G06F 15/177 (2013.01); H04L 41/0803 (2013.01); H04L 41/0806 (2013.01); H04L 41/0813 (2013.01); H04L 41/0823 (2013.01); H04L 41/0889 (2013.01); H04L 41/0894 (2022.05); H04L 41/0895 (2022.05); H04L 45/64 (2013.01); H04L 45/74 (2013.01); H04L 49/70 (2013.01); H04L 61/2503 (2013.01); H04L 61/2517 (2013.01); H04L 61/2521 (2013.01); H04L 61/256 (2013.01); H04L 63/0218 (2013.01); H04L 67/1008 (2013.01); G06F 2009/4557 (2013.01); G06F 2009/45595 (2013.01); H04L 45/02 (2013.01); H04L 49/15 (2013.01);
Abstract

Some embodiments provide a method for configuring a logical firewall in a hosting system that includes a set of nodes. The logical firewall is part of a logical network that includes a set of logical forwarding elements. The method receives a configuration for the firewall that specifies packet processing rules for the firewall. The method identifies several of the nodes on which to implement the logical forwarding elements. The method distributes the firewall configuration for implementation on the identified nodes. At a node, the firewall of some embodiments receives a a packet, from a managed switching element within the node, through a software port between the managed switching element and the distributed firewall application. The firewall determines whether to allow the packet based on the received configuration. When the packet is allowed, the firewall the packet back to the managed switching element through the software port.


Find Patent Forward Citations

Loading…