H04L61/2557

Location-aware service request handling
11190508 · 2021-11-30 · ·

Example methods and systems are provided for location-aware service request handling. The method may comprise: generating and sending location information associated with virtualized computing instance to a service node or a management entity for transmission to the service node. The location information may identify logical element(s) to which the virtualized computing instance is connected. The method may further comprise: in response to detecting, from the virtualized computing instance, a service request for a service from the service node, generating a modified service request by modifying the service request to include the location information associated with the virtualized computing instance; and sending the modified service request towards the service node.

Network Address Translation With Filters Using Hierarchical Rules

A system administrator can specify NAT mappings to perform NAT translations in a switch. The administrator can specify an ACL to filter packets to be translated. Filter rules generated from the ACL are stored in a first memory store in a switch and NAT rules generated from the NAT mappings are stored in a second memory store separate from the first memory store. When a packet matches one of the filter rules a tag that identifies the ACL is associated with the packet. When the tagged packet matches one of the NAT rules, the packet is translated according to the matched NAT rule.

DYNAMIC INTERNET PROTOCOL TRANSLATION USING PORT-CONTROL-PROTOCOL COMMUNICATION

A network device may receive, from a source device, an option request that includes a source address of the source device and a destination address of a destination device, wherein the network device is associated with an Internet protocol version 6 (IPv6) network. The network device may identify a map code that is associated with an address translation for traffic associated with the destination device and may determine, based on identifying the map code, a source prefix code and a destination prefix code for the address translation. The network device may determine a source IPv6 prefix and a destination IPv6 prefix for the address translation based on the source prefix code and the destination prefix code and may provide, to the source device, an option response to the option request to permit the source device to use the source IPv6 prefix and the destination IPv6 prefix for the traffic.

ROUTER, METHOD FOR ROUTER, COMPUTER-READABLE MEDIUM AND APPARATUS
20220021614 · 2022-01-20 ·

A router including a memory having instructions stored thereon; and a processor configured to execute the instructions stored on the memory to cause the router to perform at least the following: acquiring a private network data packet from a private network, and attaching identification information to the private network data packet, the identification information indicating via which port of a plurality of ports of the router the private network data packet is acquired; determining whether a bridge mode is set for the port indicated by the identification information of the private network data packet; in response to the determining that the bridge mode is set for the port indicated by the identification information of a first private network data packet acquired, assigning a public network IP address to the first private network data packet; and transmitting the first private network data packet by using the public network IP address.

AUTOMATED SUPPORT FOR INTERPRETATION OF TERMS
20210357951 · 2021-11-18 ·

A system and method including the reception of an input of a set of textual terms including a subject matter parameter value and an indeterminate term parameter value; automatically determining, by a machine learning process, the subject matter parameter value is subsumed within a specified data model including the indeterminate term parameter value; automatically processing the indeterminate term parameter value to execute a combination of literal, systemic, historical perspective, and teleological interpretations thereof to generate an overall assessment that includes a non-arbitrary interpretation of the indeterminate term parameter value; and presenting a representation of the set of textual terms expanded to include the non-arbitrary interpretation of the indeterminate term parameter value.

AUTOMATED SUPPORT FOR INTERPRETATION OF TERMS
20210357951 · 2021-11-18 ·

A system and method including the reception of an input of a set of textual terms including a subject matter parameter value and an indeterminate term parameter value; automatically determining, by a machine learning process, the subject matter parameter value is subsumed within a specified data model including the indeterminate term parameter value; automatically processing the indeterminate term parameter value to execute a combination of literal, systemic, historical perspective, and teleological interpretations thereof to generate an overall assessment that includes a non-arbitrary interpretation of the indeterminate term parameter value; and presenting a representation of the set of textual terms expanded to include the non-arbitrary interpretation of the indeterminate term parameter value.

MODIFICATION OF APPLICATION-PROVIDED TURN SERVERS

Techniques are provided for modifying a list of Traversal Using Relays around Network Address Translators (TURN) servers within a host application. A custom-modified browser is configured to add and/or remove TURN servers underneath a variety of host applications, including, for example, JavaScript WebRTC applications. In some cases, certain applications are permitted and/or denied use of certain TURN servers, based on local administrative policy. In accordance with another embodiment of the present disclosure, a host application can be configured or otherwise modified to use certain TURN servers on certain networks, for example, to prevent traffic from using a TURN server outside a General Data Protection Regulation (GDPR) region.

SYSTEMS AND METHODS FOR USING UNENCRYPTED COMMUNICATION TUNNELS

Described embodiments provide systems and methods for using unencrypted communication tunnels. A first device intermediary between a client and a server may maintain an encrypted tunnel and an unencrypted tunnel with a second device intermediary between the client and the server. The first device may communicate, with the second device, at least one network address translation (NAT) rule via the encrypted tunnel. The first device may translate address information of a first packet, using the at least one NAT rule. The first device may send the first packet with the translated address information via the unencrypted tunnel, to the second device to reverse the translation of the address information using the at least one NAT rule.

PRE-ALLOCATING PORT GROUPS FOR A VERY LARGE SCALE NAT ENGINE

Some embodiments provide a novel method for performing network address translation to share a limited number of external source network addresses among a large number of connections. Instead of allocating an external source network address for an egressing packet just based on its internal source network address, the method of some embodiments allocates the external source network address based on the egressing packet's source network address and destination network address. This allows a limited number of external source network addresses to be re-used for different destination network address. For instance, in some embodiments, the method's network address allocation scheme allows the same 64K (e.g., 2{circumflex over ( )}16) external source ports to be used for 64K connections for each destination network address.

Multicast and unicast medium access control (MAC) address assignment protocol (MUMAAP)

Methods and apparatuses are described herein for multicast and unicast MAC address assignment protocol (MUMAAP). A first node may transmit, to a second node, based on a unicast MAC address of the second node or a multicast MAC address associated with the second node, a discover message that may include a first MAC address or a first range of MAC addresses. The first node may receive an offer message with a second range of MAC addresses. If the first node selects a second MAC address from the received second range of MAC addresses, the first node may transmit a request message indicating that the second MAC address or the second range of MAC addresses is allocated to the first node. The first node may receive an acknowledge message indicating that the second MAC address or the second range of MAC addresses is allocated to the first node.