Abstract: Systems and methods are disclosed to provide packet copy management for service chain processing within virtual processing systems. A packet manager virtual machine (VM) controls access to shared memory that stores packet data for packets being processed by service chain VMs operating within a virtual processing environment. For certain embodiments, the packet manager VM is configured to appear as a destination NIC (network interface controller), and virtual NICs (vNICs) within the service chain VMs are configured to process packet data using pointers to access the packet data within the shared memory. Once packet data is processed by one service chain VM, the next service chain VM within the service chain is able to access the processed packet data within the shared memory through the packet manager VM. Once all service chain processing has completed, the resulting packet data is available from the shared memory for further use or processing.

Abstract: Network tool optimizers and related methods are disclosed that provide automated discovery and configuration of network tool devices. The disclosed embodiments include tool processors having tool discovery engines and tool configuration engines that provide discovery of tool information and generation of rules for filter engines within the network tool optimizer (NTO) so that relevant network traffic received by the NTO is forwarded to network tool devices connected to the NTO. New network traffic sources connected to the NTO can also be automatically configured to forward relevant traffic to the network tool devices based upon the discovered tool information. Further, a database of tool information can be stored within the NTO and can be used by the NTO in determining relevant traffic for connected tool devices. A variety of different implementations can use the automatic tool discovery and configuration embodiments.

Abstract: Systems and methods are disclosed that provide direct network traffic monitoring within virtual machine (VM) platforms operating in virtual processing environments. The disclosed embodiments in part provide direct network packet monitoring through client packet monitor applications that run within client VM platforms to obtain packet traffic and to forward this traffic directly to tool packet monitor applications operating within tool VM platforms. Further, the tool VM platforms can receive multiple incoming streams of network packets from various client VM platforms, and these incoming streams can change over time due to changes in the number of client VM platforms running within the virtual processing environment. Preferably, the network packet streams are communicated using encapsulation tunnels and related encapsulation headers, such as GRE tunnels using GRE identifiers in related encapsulation headers.

Abstract: Methods and systems are disclosed that pre-classify network traffic monitored within virtual machine (VM) platforms. Client packet monitor applications operate within client VM platforms to monitor network packets, generate monitored packets representing traffic of interest, determine packet classifications for the monitored packets based upon packet contents, identify tags associated with the packet classifications, encapsulate monitored packets with encapsulation headers including the tags to form encapsulated packets, and forward the encapsulated packets to tool VM platforms. Tool packet monitor applications operate within the tool VM platforms to receive the encapsulated packets, identify packet classifications associated with the tags, remove the encapsulation headers from the encapsulated packets, and forward de-encapsulated packets to network destinations based upon the packet classifications.

Abstract: Systems and methods are disclosed to provide packet copy management for service chain processing within virtual processing systems. A packet manager virtual machine (VM) controls access to shared memory that stores packet data for packets being processed by service chain VMs operating within a virtual processing environment. For certain embodiments, the packet manager VM is configured to appear as a destination NIC (network interface controller), and virtual NICs (vNICs) within the service chain VMs are configured to process packet data using pointers to access the packet data within the shared memory. Once packet data is processed by one service chain VM, the next service chain VM within the service chain is able to access the processed packet data within the shared memory through the packet manager VM. Once all service chain processing has completed, the resulting packet data is available from the shared memory for further use or processing.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: A networked service for providing secure access to an online marketplace by sellers and buyers. A secure member server interacts with an online classified advertisement website to allow for a selling member of the website to interface securely with a prospective buying member. Various methods are taught that allow the members to interact without exchanging personal information that could possibly be used in a fraudulent manner.

Abstract: Unified mapping tables with source/destination labels for packet forwarding systems are disclosed. In certain embodiments, local source/destination records are stored, and information from these local source/destination records are exchanged. Source/destination records from different packet forwarding systems are then combined to form unified mapping tables. Source records include general labels, descriptions of packet sources, and packet parameters to identify the source packets. Destination records include general labels, descriptions of packet destinations, and packet parameters to identify the packet destinations. The general source/destination labels are human-readable generalized descriptors that allow users/administrators of packet forwarding systems to more easily configure and define filters that determine how packets are forwarded by the packet forwarding systems.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: Systems and methods are disclosed for matrix load balancing within network packet communication systems. The disclosed embodiments in part identify multiple sets of different load balancing parameters, select one or more parameters within each set of load balancing parameters to form a matrix of load balancing parameters, generate load balancing rules (e.g., unique keys and/or signatures) based upon the matrix of load balancing parameters, apply the load balancing rules to one or more load balancers within a network packet communication system, and use the one or more load balancers to determine how packets are distributed within the network packet communication system.

Abstract: Systems and methods are disclosed for dynamic resource management for load balancing within network packet communication systems. In part, the disclosed embodiments receive operating performance information associated with processing systems within the packet network communication system, generate sets of load balancing rules based upon the operating performance information to adjust load balancing resources within the network packet communication system, apply the sets of load balancing rules to different load balancers within the network packet communication system, and use the load balancers to determine how packets are distributed within the network packet communication system. In addition, processing system resources can also be adjusted based upon operating performance information received with respect to the processing systems and load balancers.

Abstract: Network tool optimizer devices and related methods are disclosed that provide selective scanning of network packet traffic using cloud-based virtual machine tool platforms. Rather than require local network analysis tool resources, the disclosed embodiments identify subsets of packet traffic of interest, and these subsets are forwarded to a cloud-based server system where cloud-based virtual machine tool platforms are used to process the subsets of traffic of interest. Results from this processing are then provided back to adjust the operation of the network tool optimizers. Some further embodiments use local capture buffers and remote cloud replay buffers to stored subsets of traffic locally for later communication to cloud server systems where cloud-based tools analyze replays of the captured network traffic. Some further embodiments also use results from cloud-based tools to initiate local virtual machine tool platforms that are used to further analyze traffic of interest.

Abstract: Network tool optimizers and related methods are disclosed that provide automated discovery and configuration of network tool devices. The disclosed embodiments include tool processors having tool discovery engines and tool configuration engines that provide discovery of tool information and generation of rules for filter engines within the network tool optimizer (NTO) so that relevant network traffic received by the NTO is forwarded to network tool devices connected to the NTO. New network traffic sources connected to the NTO can also be automatically configured to forward relevant traffic to the network tool devices based upon the discovered tool information. Further, a database of tool information can be stored within the NTO and can be used by the NTO in determining relevant traffic for connected tool devices. A variety of different implementations can use the automatic tool discovery and configuration embodiments.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: A networked service for providing secure access to an online marketplace by sellers and buyers. A secure member server interacts with an online classified advertisement website to allow for a selling member of the website to interface securely with a prospective buying member. Various methods are taught that allow the members to interact without exchanging personal information that could possibly be used in a fraudulent manner.