公开(公告)号：US10567345B2

公开(公告)日：2020-02-18

申请号：US15907412

申请日：2018-02-28

Applicant: Juniper Networks, Inc.

Inventor： Chirag Wighe ,  Siva Madasamy

IPC: H04L29/06

Abstract: A device may receive a firewall filter entry that includes one or more match conditions associated with filtering network traffic. The device may identify an access control list (ACL) template associated with the firewall filter entry. The ACL template may be associated with a template type. The device may identify one or more rules, for verifying the firewall filter entry, based on the template type associated with the ACL template. The device may verify the firewall filter entry using the one or more rules. The device may determine a hardware resource, for storing the firewall filter entry, based on the template type and based on verifying the firewall filter entry. The device may store the firewall filter entry using the hardware resource of the device.

公开(公告)号：US09940160B1

公开(公告)日：2018-04-10

申请号：US15276220

申请日：2016-09-26

Applicant: Juniper Networks, Inc.

Inventor： Ganesh Raman ,  Chirag Wighe ,  Santhanakrishnan Balraj ,  Sathish M. Shenoy ,  Shunmugavel Rajarathinam ,  Sumanth R. Kamatala

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F9/4401 ,  G06F2009/45562 ,  G06F2009/45575

Abstract: A device may receive an indication to perform a reboot associated with a network service being provided using a first virtual machine (VM) running on the device. The device may launch, based on receiving the indication, a second VM on the device. The device may shut down, based on launching the second VM, the first VM. The device may configure the second VM for forwarding control plane traffic associated with the network service. The device may configure, based on configuring the second VM for forwarding the control plane traffic, the second VM for forwarding data plane traffic associated with the network service. The device may provide, based on configuring the second VM for forwarding the data plane traffic, the network service using the second VM.

公开(公告)号：US09778944B1

公开(公告)日：2017-10-03

申请号：US14940302

申请日：2015-11-13

Applicant: Juniper Networks, Inc.

Inventor： Siva Madasamy ,  Chirag Wighe

IPC: G06F9/455 ,  G06F9/50

CPC classification number: G06F9/45533 ,  G06F9/4401 ,  G06F9/45558 ,  G06F9/5077 ,  G06F2009/45562 ,  G06F2009/45575

Abstract: A device may receive an indication to perform a reboot associated with a network service provided via a first virtual machine (VM) of the device and a first container of the device. The device may create a second VM with a boot mode enabled and a second container with the boot mode enabled. The boot mode, while enabled on the second VM, may prevent the second VM from communicating with the first container. The boot mode, while enabled on the second container, may prevent the second container from communicating with the first VM. The device may shut down the first container. The device may disable, after shutting down the first container, the boot mode on the second VM. The device may disable the boot mode on the second container. The device may cause the network service to be provided by the second container and the second VM.

公开(公告)号：US20180191683A1

公开(公告)日：2018-07-05

申请号：US15907412

申请日：2018-02-28

Applicant: Juniper Networks, Inc.

Inventor： Chirag Wighe ,  Siva Madasamy

IPC: H04L29/06

CPC classification number: H04L63/0263 ,  H04L63/101

Abstract: A device may receive a firewall filter entry that includes one or more match conditions associated with filtering network traffic. The device may identify an access control list (ACL) template associated with the firewall filter entry. The ACL template may be associated with a template type. The device may identify one or more rules, for verifying the firewall filter entry, based on the template type associated with the ACL template. The device may verify the firewall filter entry using the one or more rules. The device may determine a hardware resource, for storing the firewall filter entry, based on the template type and based on verifying the firewall filter entry. The device may store the firewall filter entry using the hardware resource of the device.

公开(公告)号：US09912639B1

公开(公告)日：2018-03-06

申请号：US14980232

申请日：2015-12-28

Applicant: Juniper Networks, Inc.

Inventor： Chirag Wighe ,  Siva Madasamy

IPC: G06F15/16 ,  H04L29/06

CPC classification number: H04L63/0263 ,  H04L63/101

Abstract: A device may receive a firewall filter entry that includes one or more match conditions associated with filtering network traffic. The device may identify an access control list (ACL) template associated with the firewall filter entry. The ACL template may be associated with a template type. The device may identify one or more rules, for verifying the firewall filter entry, based on the template type associated with the ACL template. The device may verify the firewall filter entry using the one or more rules. The device may determine a hardware resource, for storing the firewall filter entry, based on the template type and based on verifying the firewall filter entry. The device may store the firewall filter entry using the hardware resource of the device.