Abstract: According to embodiments herein e.g. a method performed by a network node unit for managing packet handling in a communications network is provided. The network node unit reads through routing entries in a routing information base. The network node unit performs for one or more routing entries, a hash process on a network address of the routing entry into a hashed network address associated with an identity of a forwarding unit. The network node unit sends information relating to the routing entry to the forwarding unit with the identity thereby partitioning the routing entries to different forwarding units e.g. targeted by a correlated traffic distribution mechanism.

Abstract: A method and a traffic processing unit (200) for handling traffic in a communication network when the traffic is distributed across a set of traffic processing units. When receiving a packet of a traffic flow distributed to said traffic processing unit, the traffic processing unit (200) assigns a packet class to the received packet, which class can be active or inactive in the traffic processing unit. The traffic processing unit obtains state information of the assigned packet class. If the packet class is detected as active the state information is retrieved from a local storage (200C) in the traffic processing unit, and if the packet class is detected as inactive the state information is fetched from a central storage (204). The traffic processing unit then performs stateful packet processing of the received packet based on the obtained state information.

Abstract: A method implemented by a network device for selection of a routing table in a Policy Based Routing (PBR) system is described. The method may include receiving a packet from a first network domain; generating a firewall mark for the packet, wherein the firewall mark includes a network domain indication and a packet classification indication; determining a match between the network domain indication of the packet and a selector of a matched rule in a set of rules; and upon determining the match between the network domain indication of the packet and the selector of the matched rule, inputting the firewall mark to a function of the matched rule to identify a routing table for the packet.

Abstract: The invention provides, in one aspect, a server load balancer (SLB) recovery method that replicates a primary SLB's connection data after the primary SLB experiences a failure, as opposed to before it experiences a failure as is currently done in the known hot stand-by recovery method. In some embodiments, this is made possible by (1) employing a replication agent on each target processing unit (e.g., each processing unit on which a server application runs) and (2) transmitting, from the primary SLB, connection data information (i.e., information comprising a session identifier) to the replication agent running on the target processing unit to which the session is mapped, which replication agent will store the data until it is required to transmit the data to a cold stand-by SLB.

Abstract: A method and a traffic processing unit (200) for handling traffic in a communication network when the traffic is distributed across a set of traffic processing units. When receiving a packet of a traffic flow distributed to said traffic processing unit, the traffic processing unit (200) assigns a packet class to the received packet, which class can be active or inactive in the traffic processing unit. The traffic processing unit obtains state information of the assigned packet class. If the packet class is detected as active the state information is retrieved from a local storage (200C) in the traffic processing unit, and if the packet class is detected as inactive the state information is fetched from a central storage (204). The traffic processing unit then performs stateful packet processing of the received packet based on the obtained state information.

Abstract: A method implemented by a network device for selection of a routing table in a Policy Based Routing (PBR) system is described. The method may include receiving a packet from a first network domain; generating a firewall mark for the packet, wherein the firewall mark includes a network domain indication and a packet classification indication; determining a match between the network domain indication of the packet and a selector of a matched rule in a set of rules; and upon determining the match between the network domain indication of the packet and the selector of the matched rule, inputting the firewall mark to a function of the matched rule to identify a routing table for the packet.

Abstract: A load balancing system that utilizes a dynamic method for updating a load balancer's pool of targets (e.g., a dynamic method for adding newly available targets to the pool of targets and/or removing from the pool of targets a target that is no longer accepting new connections). Advantageously, this dynamic method does not require periodic monitoring of each of the targets in the pool of targets.

Abstract: A method for providing resilient load balancing in a system comprising a first processing unit, a second processing unit, a first active load balancer and a second active load balancer is disclosed. A first set of packet flows may be mapped to the first active load balancer and a second set of packet flows may be mapped to the second active load balancer. The first set of packet flows may include a first packet flow.

Abstract: A method for packet classification. In some embodiments, the method includes instantiating a first machine; allocating a first SC to the first machine, the first SC being configured to classify a packet based on information contained in a field of a header included in the packet; instantiating a second machine; allocating a second SC to the second machine, the second SC being configured to classify a packet based on information contained in a field of a header included in the packet; monitoring the first machine to detect if the first machine is in an overload state; and in response to detecting that the first machine is in an overload state, instantiating a third machine and allocating a third SC to the third machine, the third SC being configured to classify a packet based on information contained in a field of a header included in the packet.

Abstract: The invention provides, in one aspect, a server load balancer (SLB) recovery method that replicates a primary SLB's connection data after the primary SLB experiences a failure, as opposed to before it experiences a failure as is currently done in the known hot stand-by recovery method. In some embodiments, this is made possible by (1) employing a replication agent on each target processing unit (e.g., each processing unit on which a server application runs) and (2) transmitting, from the primary SLB, connection data information (i.e., information comprising a session identifier) to the replication agent running on the target processing unit to which the session is mapped, which replication agent will store the data until it is required to transmit the data to a cold stand-by SLB.

Abstract: Systems, methods, and computer program products for a software build and load process using a compilation and deployment service. A method for a software build and load process using a compilation and deployment service includes receiving, at the service, new software. The method further includes comparing, at the service, the received new software with data in a database, wherein the data comprises active software. The method further includes merging, at the service said new software and active software into one or more load modules based on the comparison. The method further includes deploying the one or more load modules to one or more target processing units.

Abstract: A method in a gateway router is described. The method includes receiving traffic with a destination of a virtual internet protocol (VIP) address corresponding to a scalable VIP appliance; selecting a point-to-point VIP tunnel associated with the VIP address, wherein the point-to-point VIP tunnel encapsulates a point-to-point link between the gateway router and the scalable VIP appliance; separating one or more packets within the traffic; classifying each of the one or more separated packets based on one or more indicators of the one or more separated packets; and forwarding each of the one or more separated packets to one of one or more IP tunnels based on the classification of each of the separated packets, wherein the one or more IP tunnels are connected to the scalable VIP appliance and wherein the one or more IP tunnels comprise a forwarding tunnel group associated with the point-to-point VIP tunnel.

Abstract: A method in a gateway router is described. The method includes receiving traffic with a destination of a virtual internet protocol (VIP) address corresponding to a scalable VIP appliance; selecting a point-to-point VIP tunnel associated with the VIP address, wherein the point-to-point VIP tunnel encapsulates a point-to-point link between the gateway router and the scalable VIP appliance; separating one or more packets within the traffic; classifying each of the one or more separated packets based on one or more indicators of the one or more separated packets; and forwarding each of the one or more separated packets to one of one or more IP tunnels based on the classification of each of the separated packets, wherein the one or more IP tunnels are connected to the scalable VIP appliance and wherein the one or more IP tunnels comprise a forwarding tunnel group associated with the point-to-point VIP tunnel.

Abstract: A method in a gateway router is described. The method includes receiving traffic with a destination of a virtual internet protocol (VIP) address corresponding to a scalable VIP appliance; selecting a point-to-point VIP tunnel associated with the VIP address, wherein the point-to-point VIP tunnel encapsulates a point-to-point link between the gateway router and the scalable VIP appliance; separating one or more packets within the traffic; classifying each of the one or more separated packets based on one or more indicators of the one or more separated packets; and forwarding each of the one or more separated packets to one of one or more IP tunnels based on the classification of each of the separated packets, wherein the one or more IP tunnels are connected to the scalable VIP appliance and wherein the one or more IP tunnels comprise a forwarding tunnel group associated with the point-to-point VIP tunnel.

Abstract: A method in a gateway router is described. The method includes receiving traffic with a destination of a virtual internet protocol (VIP) address corresponding to a scalable VIP appliance; selecting a point-to-point VIP tunnel associated with the VIP address, wherein the point-to-point VIP tunnel encapsulates a point-to-point link between the gateway router and the scalable VIP appliance; separating one or more packets within the traffic; classifying each of the one or more separated packets based on one or more indicators of the one or more separated packets; and forwarding each of the one or more separated packets to one of one or more IP tunnels based on the classification of each of the separated packets, wherein the one or more IP tunnels are connected to the scalable VIP appliance and wherein the one or more IP tunnels comprise a forwarding tunnel group associated with the point-to-point VIP tunnel.

Abstract: Systems, methods, and computer program products for a software build and load process using a compilation and deployment service. A method for a software build and load process using a compilation and deployment service includes receiving, at the service, new software. The method further includes comparing, at the service, the received new software with data in a database, wherein the data comprises active software. The method further includes merging, at the service said new software and active software into one or more load modules based on the comparison. The method further includes deploying the one or more load modules to one or more target processing units.

Abstract: Systems, methods, and computer program products for a software build and load process using a compilation and deployment service. A method for a software build and load process using a compilation and deployment service includes receiving, at the service, new software. The method further includes comparing, at the service, the received new software with data in a database, wherein the data comprises active software. The method further includes merging, at the service said new software and active software into one or more load modules based on the comparison. The method further includes deploying the one or more load modules to one or more target processing units.

Abstract: A method for providing resilient load balancing in a system comprising a first processing unit, a second processing unit, a first active load balancer and a second active load balancer is disclosed. A first set of packet flows may be mapped to the first active load balancer and a second set of packet flows may be mapped to the second active load balancer. The first set of packet flows may include a first packet flow.

Abstract: Disclosed is a method for recovering from the failure of a gateway server. In some embodiment, the method includes: receiving, at a backup gateway server, a message transmitted from a client, the message comprising a network resource previously allocated to the client by the gateway server that failed; determining whether the network resource is free; and transmitting, from the backup gateway server to the client, an acknowledgment indicating that the client may continue using the network resource in response to a determination that the network resource is free.

Abstract: A method for packet classification. In some embodiments, the method includes instantiating a first machine; allocating a first SC to the first machine, the first SC being configured to classify a packet based on information contained in a field of a header included in the packet; instantiating a second machine; allocating a second SC to the second machine, the second SC being configured to classify a packet based on information contained in a field of a header included in the packet; monitoring the first machine to detect if the first machine is in an overload state; and in response to detecting that the first machine is in an overload state, instantiating a third machine and allocating a third SC to the third machine, the third SC being configured to classify a packet based on information contained in a field of a header included in the packet.