Patents by Inventor Davide CELOTTO

Davide CELOTTO has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Methods for revalidating FQDN rulesets in a firewall
    Patent number: 12659299
    Abstract: A method comprises: in response to detecting a new expression in a policy rule, updating a global version number to a new value; identifying a particular IP address that corresponds to an FQDN matching on the new expression; storing an entry comprising the particular IP address, the new expression, and an entry version number in a first data structure, the entry version number being assigned the new value; in response to detecting a new connection to a destination IP address: finding a matching entry in the first data structure corresponding to the destination IP address; determining whether the global version number matches the entry version number for the matching entry; and in response to determining that the global version number does not match the entry version number for the matching entry, sending update information to a slowpath process that associates an updated configuration information for the matching entry.
    Type: Grant
    Filed: July 9, 2024
    Date of Patent: June 16, 2026
    Assignee: VMware LLC
    Inventors: Sushruth Gopal, Jayant Jain, Davide Celotto, Josh Swerdlow
  • METHODS FOR REVALIDATING FQDN RULESETS IN A FIREWALL
    Publication number: 20240372835
    Abstract: A method comprises: in response to detecting a new expression in a policy rule, updating a global version number to a new value; identifying a particular IP address that corresponds to an FQDN matching on the new expression; storing an entry comprising the particular IP address, the new expression, and an entry version number in a first data structure, the entry version number being assigned the new value; in response to detecting a new connection to a destination IP address: finding a matching entry in the first data structure corresponding to the destination IP address; determining whether the global version number matches the entry version number for the matching entry; and in response to determining that the global version number does not match the entry version number for the matching entry, sending update information to a slowpath process that associates an updated configuration information for the matching entry.
    Type: Application
    Filed: July 9, 2024
    Publication date: November 7, 2024
    Inventors: Sushruth GOPAL, Jayant JAIN, Davide CELOTTO, Josh SWERDLOW
  • Methods for revalidating FQDN rulesets in a firewall
    Patent number: 12034700
    Abstract: A method comprises: in response to detecting a new expression in a policy rule, updating a global version number to a new value; identifying a particular IP address that corresponds to an FQDN matching on the new expression; storing an entry comprising the particular IP address, the new expression, and an entry version number in a first data structure, the entry version number being assigned the new value; in response to detecting a new connection to a destination IP address: finding a matching entry in the first data structure corresponding to the destination IP address; determining whether the global version number matches the entry version number for the matching entry; and in response to determining that the global version number does not match the entry version number for the matching entry, sending update information to a slowpath process that associates an updated configuration information for the matching entry.
    Type: Grant
    Filed: April 7, 2020
    Date of Patent: July 9, 2024
    Assignee: VMware, Inc.
    Inventors: Sushruth Gopal, Jayant Jain, Davide Celotto, Josh Swerdlow
  • METHODS FOR REVALIDATING FQDN RULESETS IN A FIREWALL
    Publication number: 20210314299
    Abstract: A method comprises: in response to detecting a new expression in a policy rule, updating a global version number to a new value; identifying a particular IP address that corresponds to an FQDN matching on the new expression; storing an entry comprising the particular IP address, the new expression, and an entry version number in a first data structure, the entry version number being assigned the new value; in response to detecting a new connection to a destination IP address: finding a matching entry in the first data structure corresponding to the destination IP address; determining whether the global version number matches the entry version number for the matching entry; and in response to determining that the global version number does not match the entry version number for the matching entry, sending update information to a slowpath process that associates an updated configuration information for the matching entry.
    Type: Application
    Filed: April 7, 2020
    Publication date: October 7, 2021
    Applicant: VMware, Inc.
    Inventors: Sushruth GOPAL, Jayant JAIN, Davide CELOTTO, Josh SWERDLOW