Abstract: A network device includes a control processor and a network processor unit (NPU) to forward network packets between network ports of the device. The processor downloads a new operating system (OS). The processor performs a fast upgrade to the new OS using a fast upgrade/reload technique to isolate the processor from interruptions and, without rebooting the processor, start the new OS in place of an existing OS. The fast upgrade/reload also includes delaying a reset of the NPU so that the NPU continues to route the network packets based on existing forwarding information. The fast upgrade/reload includes resetting the NPU only when the new OS first accesses the NPU, and then programming the reset NPU.

Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: A method, system, and apparatus to transmit replicated multicast packets over a plurality of physical network links that are combined into one logical channel or link so that the replicated multicast packets are distributed over more than one network link is disclosed. It is further disclosed that distribution over the network links is accomplished, in part, through analyzing the multicast packet for information other than ethernet addresses. Such information can include a tag header including destination interface information.

Abstract: Efficient multicasting within a layer 2 network is provided. Participation by a layer 3 router is not required. The spanning tree created by common layer 2 networking protocols is exploited for multicast signaling and traffic handling.

Abstract: Methods and systems are provided for managing network traffic in a network device, based on matching criteria. The method includes providing a plurality of objects associated with a packet of the network traffic. A set of criteria corresponding to the type of objects and corresponding to the layer-4 protocol is created. A packet is accepted if the plurality of objects matches the set of criteria.

Abstract: A method and system for controlling admission of an end user to a multicast channel over a network implementing a source filtering protocol. Incoming packet traffic received by an edge router is snooped and, when a request to join a multicast channel is received, the traffic is analyzed. Any service policy associated with the traffic class is found and applied to packet traffic from the requesting user. The actions include accepting membership in a group associated with a multicast channel and pushing the packets to the end user. If the action is to deny membership, then the multicast packets are prevented from reaching the end user. In addition information is logged and may be used for billing purposes or for accumulating marketing or other such information. Also, the actions may be to limit the number of routing states, by denying admittance to a groups once a limit number of requests to join, or other such parameter, is reached. Such limiting will substantially prevent DOS attacks on a multicast router.