Patents by Inventor Philip Kippen
Philip Kippen has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20230388200Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: ApplicationFiled: July 28, 2023Publication date: November 30, 2023Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Patent number: 11824778Abstract: The technology disclosed herein enables a dynamic chain of service functions for processing network traffic. In a particular embodiment, a method includes, in a logical router for a logical network connecting service functions, receiving a network packet from a service function over the logical network after the network packet has been processed by the service function. The method further includes determining a new classification of the network packet and determining a next service function based on application of a service chain policy to the new classification. The method also includes directing the network packet to the next service function over the logical network.Type: GrantFiled: May 11, 2022Date of Patent: November 21, 2023Assignee: Nicira, Inc.Inventors: Sami Boutros, Mani Kancherla, Dharmaraja Rajan, Philip Kippen, Yashika Narang, Chidambareswaran Raman
-
Patent number: 11750476Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: GrantFiled: October 9, 2020Date of Patent: September 5, 2023Assignee: NICIRA, INC.Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Publication number: 20220272037Abstract: The technology disclosed herein enables a dynamic chain of service functions for processing network traffic. In a particular embodiment, a method includes, in a logical router for a logical network connecting service functions, receiving a network packet from a service function over the logical network after the network packet has been processed by the service function. The method further includes determining a new classification of the network packet and determining a next service function based on application of a service chain policy to the new classification. The method also includes directing the network packet to the next service function over the logical network.Type: ApplicationFiled: May 11, 2022Publication date: August 25, 2022Inventors: Sami Boutros, Mani Kancherla, Dharmaraja Rajan, Philip Kippen, Yashika Narang, Chidambareswaran Raman
-
Dynamic chain of service functions for processing network traffic in a virtual computing environment
Patent number: 11336572Abstract: The technology disclosed herein enables a dynamic chain of virtual service functions for processing network traffic in a virtual computing environment. In a particular embodiment, a method includes providing a service chain policy to a virtual routing element connecting the respective service functions and determining an initial classification of a network packet entering the dynamic service chain. The initial classification indicates at least a first service function in a sequence of the service functions for processing the network packet. The method further includes providing a service chain policy to a virtual routing element connecting the respective service functions.Type: GrantFiled: May 12, 2017Date of Patent: May 17, 2022Assignee: Nicira, Inc.Inventors: Sami Boutros, Mani Kancherla, Dharmaraja Rajan, Philip Kippen, Yashika Narang, Chidambareswaran Raman -
Publication number: 20210044502Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: ApplicationFiled: October 9, 2020Publication date: February 11, 2021Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Patent number: 10805181Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: GrantFiled: January 26, 2018Date of Patent: October 13, 2020Assignee: NICIRA, INC.Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Patent number: 10797966Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: GrantFiled: January 26, 2018Date of Patent: October 6, 2020Assignee: NICIRA, INC.Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Publication number: 20190132221Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: ApplicationFiled: January 26, 2018Publication date: May 2, 2019Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
Publication number: 20190132220Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).Type: ApplicationFiled: January 26, 2018Publication date: May 2, 2019Inventors: Sami Boutros, Pere Monclus, Philip Kippen, Dharma Rajan, Yashika Narang
-
DYNAMIC CHAIN OF SERVICE FUNCTIONS FOR PROCESSING NETWORK TRAFFIC IN A VIRTUAL COMPUTING ENVIRONMENT
Publication number: 20180331951Abstract: The technology disclosed herein enables a dynamic chain of virtual service functions for processing network traffic in a virtual computing environment. In a particular embodiment, a method includes providing a service chain policy to a virtual routing element connecting the respective service functions and determining an initial classification of a network packet entering the dynamic service chain. The initial classification indicates at least a first service function in a sequence of the service functions for processing the network packet. The method further includes providing a service chain policy to a virtual routing element connecting the respective service functions.Type: ApplicationFiled: May 12, 2017Publication date: November 15, 2018Inventors: Sami Boutros, Mani Kancherla, Dharmaraja Rajan, Philip Kippen, Yashika Narang, Chidambareswaran Raman -
Patent number: 10129186Abstract: A data system transfers data packets over Service Function Chains (SFCs). A classifier receives the packets and determines SFC Identifiers (IDs) and metadata. The classifier inserts the SFC IDs and metadata in Virtual Local Area Network (VLAN) ID data fields of the packets. The classifier transfers the classified packets to a forwarder. The forwarder identifies the SFC IDs and metadata from the VLAN ID data fields. The forwarder selects network functions based on the SFC IDs and metadata. The forwarder transfers the packets having the SFC IDs and metadata in the VLAN ID data fields to the selected network functions. The selected network functions identify the SFC IDs and metadata from the VLAN ID data fields. The network functions process the packets based on the SFC IDs, metadata, and configured policies to perform functions like network address translation, firewall, deep packet inspection, and others.Type: GrantFiled: December 7, 2016Date of Patent: November 13, 2018Assignee: Nicira, Inc.Inventors: Dharmaraja Rajan, Sami Boutros, Philip Kippen
-
Publication number: 20180159801Abstract: A data system transfers data packets over Service Function Chains (SFCs). A classifier receives the packets and determines SFC Identifiers (IDs) and metadata. The classifier inserts the SFC IDs and metadata in Virtual Local Area Network (VLAN) ID data fields of the packets. The classifier transfers the classified packets to a forwarder. The forwarder identifies the SFC IDs and metadata from the VLAN ID data fields. The forwarder selects network functions based on the SFC IDs and metadata. The forwarder transfers the packets having the SFC IDs and metadata in the VLAN ID data fields to the selected network functions. The selected network functions identify the SFC IDs and metadata from the VLAN ID data fields. The network functions process the packets based on the SFC IDs, metadata, and configured policies to perform functions like network address translation, firewall, deep packet inspection, and others.Type: ApplicationFiled: December 7, 2016Publication date: June 7, 2018Inventors: Dharmaraja Rajan, Sami Boutros, Philip Kippen