Abstract: In various embodiments, methods and systems for implementing network traffic flow logging in a distributed computing system are provided. At a high level, the network traffic flow logger is implemented using a network traffic flow logger framework that includes a plurality of modular network traffic flow logging objects for adjustable processing of network flow events. In operation, a plurality of tokens is counted at a first throttling rate. The first throttling rate is associated with a maximum number of tokens threshold. The maximum number of tokens threshold is an adjustable threshold. A flow event is accessed, where flow events are quantified based on tokens. The flow event is queued, based on a count of the plurality of tokens or the maximum number of tokens threshold. Based on queueing the flow event, the first throttling rate is adjusted to a second throttling rate based on a queue length of the queue.

Abstract: In various embodiments, methods and systems for implementing network traffic flow logging in a distributed computing system are provided. At a high level, the network traffic flow logger is implemented using a network traffic flow logger framework that includes a plurality of modular network traffic flow logging objects for adjustable processing of network flow events. In operation, a plurality of tokens is counted at a first throttling rate. The first throttling rate is associated with a maximum number of tokens threshold. The maximum number of tokens threshold is an adjustable threshold. A flow event is accessed, where flow events are quantified based on tokens. The flow event is queued, based on a count of the plurality of tokens or the maximum number of tokens threshold. Based on queueing the flow event, the first throttling rate is adjusted to a second throttling rate based on a queue length of the queue.

Abstract: A computer system enforces network security policy by pre-classifying network traffic. Unidimensional pre-classifier filters analyze network traffic to populate a pre-classifier bit array. Rather than having filter explosion with the creation of multidimensional filters, the pre-classifier bit array is used by other layers and/or filters to enforce network security policy. Further, reclassification of network traffic due to network security changes is streamlined due to the inclusion of pre-classifier layers and the pre-classifier bit array.

Abstract: Present disclosure provides techniques for dynamically determining how to store and expire non-TCP traffic in a network environment. In some examples, aspects of the present disclosure may implement a state machine operated by the server for managing non-TCP traffic. Critically, in accordance with aspects of the present disclosure, non-TCP traffic may be combined with the use of multiple memory partitions and an expiry algorithm that supports dynamic scaling of non-TCP traffic while achieving faster connection speed, higher system performance, and lower time complexity.

Abstract: A computer system enforces network security policy by pre-classifying network traffic. Unidimensional pre-classifier filters analyze network traffic to populate a pre-classifier bit array. Rather than having filter explosion with the creation of multidimensional filters, the pre-classifier bit array is used by other layers and/or filters to enforce network security policy. Further, reclassification of network traffic due to network security changes is streamlined due to the inclusion of pre-classifier layers and the pre-classifier bit array.

Abstract: Present disclosure provides techniques for dynamically determining how to store and expire non-TCP traffic in a network environment. In some examples, aspects of the present disclosure may implement a state machine operated by the server for managing non-TCP traffic. Critically, in accordance with aspects of the present disclosure, non-TCP traffic may be combined with the use of multiple memory partitions and an expiry algorithm that supports dynamic scaling of non-TCP traffic while achieving faster connection speed, higher system performance, and lower time complexity.

Abstract: The technology disclosed relates to implementing a novel architecture of a finite state machine (abbreviated FSM) that can be used for testing. In particular, it can be used for testing communications devices and communication protocol behaviors.

Abstract: The technology disclosed relates to implementing a novel architecture of a finite state machine (abbreviated FSM) that can be used for testing. In particular, it can be used for testing communications devices and communication protocol behaviors.